Delete cached local copy of mandatory profile and non roaming domain user profiles ?

[Guest Alex]

Hi. We are currently looking to deploy some Windows XP workstations on a

2003 Domain for development purposes. We are using a mix of mandatory

profiles and general domain users that have NO roaming or mandatory profile.

We are finding that the XP workstations are storing a local copy of the

mandatory profiles and the gerneral domain user accounts as well.

 

Can anyone confirm whether Windows should automatically remove Mandatory

profiles when the user logs off, and if so can anyone suggest why a copy of

the profiles are being left behind ?

 

Similarly can anyone recommend how we can allow users with a basic domain

user account (no roaming or mandatory profile) to logon to our XP

workstations such that their locally created profile is automatically

deleted when they logoff ? i.e. no matter the user type (even domain admin

if possible) we would like to remove any locally stored user profiles.

 

Thanks,

Alex.

[Guest Lanwench [MVP - Exchange]]

Re: Delete cached local copy of mandatory profile and non roaming domain user profiles ?

 

Re: Delete cached local copy of mandatory profile and non roaming domain user profiles ?

 

Alex <email@microsoft.newsgroups> wrote:

> Hi. We are currently looking to deploy some Windows XP workstations

> on a 2003 Domain for development purposes. We are using a mix of

> mandatory profiles and general domain users that have NO roaming or

> mandatory profile. We are finding that the XP workstations are

> storing a local copy of the mandatory profiles and the gerneral

> domain user accounts as well.

 

Yep - that's normal.

>

> Can anyone confirm whether Windows should automatically remove

> Mandatory profiles when the user logs off,

 

Nope.

> and if so can anyone

> suggest why a copy of the profiles are being left behind ?

 

It's by design, as they say.

>

> Similarly can anyone recommend how we can allow users with a basic

> domain user account (no roaming or mandatory profile) to logon to our

> XP workstations such that their locally created profile is

> automatically deleted when they logoff ? i.e. no matter the user type

> (even domain admin if possible) we would like to remove any locally

> stored user profiles.

> Thanks,

> Alex.

 

For roaming profiles, this can be done in your group policy settings -

http://support.microsoft.com/kb/274152

For non-roaming, I'm not sure there's a policy option for it. However,

delprof certainly works -

http://windowsitpro.com/articles/print.cfm?articleid=48249

 

Personally - I always use roaming profiles (and folder redirection,so the

profiles stay tiny) and I also *want* a local copy cached on the machine to

eliminate the delay between a user logging in, and a user getting to work.

Just my $.02 and your environment may well be different.

[Guest S. Pidgorny]

Re: Delete cached local copy of mandatory profile and non roaming domain user profiles ?

 

Re: Delete cached local copy of mandatory profile and non roaming domain user profiles ?

 

Create a computer startup script that deletes the local profiles if they are

of a concern to you. Users won't be able to delete profiles as a part of

logoff process.

 

--

Svyatoslav Pidgorny, MS MVP - Security, MCSE

-= F1 is the key =-

 

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

 

"Alex" <email@microsoft.newsgroups> wrote in message

news:%23WdbaD3qIHA.1436@TK2MSFTNGP05.phx.gbl...

> Hi. We are currently looking to deploy some Windows XP workstations on a

> 2003 Domain for development purposes. We are using a mix of mandatory

> profiles and general domain users that have NO roaming or mandatory

> profile. We are finding that the XP workstations are storing a local copy

> of the mandatory profiles and the gerneral domain user accounts as well.

>

> Can anyone confirm whether Windows should automatically remove Mandatory

> profiles when the user logs off, and if so can anyone suggest why a copy

> of the profiles are being left behind ?

>

> Similarly can anyone recommend how we can allow users with a basic domain

> user account (no roaming or mandatory profile) to logon to our XP

> workstations such that their locally created profile is automatically

> deleted when they logoff ? i.e. no matter the user type (even domain admin

> if possible) we would like to remove any locally stored user profiles.

>

> Thanks,

> Alex.

>

>

>

[Guest Herb Martin]

Re: Delete cached local copy of mandatory profile and non roaming domain user profiles ?

 

Re: Delete cached local copy of mandatory profile and non roaming domain user profiles ?

 

 

"S. Pidgorny <MVP>" <slavickp@yahoo.com> wrote in message

news:%23gJ1UiYrIHA.3616@TK2MSFTNGP06.phx.gbl...

> Create a computer startup script that deletes the local profiles if they

> are of a concern to you. Users won't be able to delete profiles as a part

> of logoff process.

 

One of the fastest methods to (permanently) delete a directory

tree is: "del /s /q PATH"

 

/s = subdirectory /q = quite (no warnings)

 

This is VERY dangerous as it will (usually*) delete everything in it

without further warning so get the PATH correct. * Unless files

are locked but at startup that is unlikely.

 

A "for /d" (directories) loop can get all directories but be careful

not to delete the Default (or other profiles you wish to keep.)

> --

> Svyatoslav Pidgorny, MS MVP - Security, MCSE

> -= F1 is the key =-

>

> * http://sl.mvps.org * http://msmvps.com/blogs/sp *

>

> "Alex" <email@microsoft.newsgroups> wrote in message

> news:%23WdbaD3qIHA.1436@TK2MSFTNGP05.phx.gbl...

>> Hi. We are currently looking to deploy some Windows XP workstations on a

>> 2003 Domain for development purposes. We are using a mix of mandatory

>> profiles and general domain users that have NO roaming or mandatory

>> profile. We are finding that the XP workstations are storing a local copy

>> of the mandatory profiles and the gerneral domain user accounts as well.

>>

>> Can anyone confirm whether Windows should automatically remove Mandatory

>> profiles when the user logs off, and if so can anyone suggest why a copy

>> of the profiles are being left behind ?

>>

>> Similarly can anyone recommend how we can allow users with a basic domain

>> user account (no roaming or mandatory profile) to logon to our XP

>> workstations such that their locally created profile is automatically

>> deleted when they logoff ? i.e. no matter the user type (even domain

>> admin if possible) we would like to remove any locally stored user

>> profiles.

>>

>> Thanks,

>> Alex.

>>

>>

>>

>

>

[Guest Lanwench [MVP - Exchange]]

Re: Delete cached local copy of mandatory profile and non roaming domain user profiles ?

 

Re: Delete cached local copy of mandatory profile and non roaming domain user profiles ?

 

Herb Martin <news@learnquick.com> wrote:

> "S. Pidgorny <MVP>" <slavickp@yahoo.com> wrote in message

> news:%23gJ1UiYrIHA.3616@TK2MSFTNGP06.phx.gbl...

>> Create a computer startup script that deletes the local profiles if

>> they are of a concern to you. Users won't be able to delete profiles

>> as a part of logoff process.

>

> One of the fastest methods to (permanently) delete a directory

> tree is: "del /s /q PATH"

>

> /s = subdirectory /q = quite (no warnings)

>

> This is VERY dangerous as it will (usually*) delete everything in it

> without further warning so get the PATH correct. * Unless files

> are locked but at startup that is unlikely.

>

> A "for /d" (directories) loop can get all directories but be careful

> not to delete the Default (or other profiles you wish to keep.)

 

Hence, using delprof instead would be a very simple alternative :-)

>

>> --

>> Svyatoslav Pidgorny, MS MVP - Security, MCSE

>> -= F1 is the key =-

>>

>> * http://sl.mvps.org * http://msmvps.com/blogs/sp *

>>

>> "Alex" <email@microsoft.newsgroups> wrote in message

>> news:%23WdbaD3qIHA.1436@TK2MSFTNGP05.phx.gbl...

>>> Hi. We are currently looking to deploy some Windows XP

>>> workstations on a 2003 Domain for development purposes. We are

>>> using a mix of mandatory profiles and general domain users that

>>> have NO roaming or mandatory profile. We are finding that the XP

>>> workstations are storing a local copy of the mandatory profiles and

>>> the gerneral domain user accounts as well. Can anyone confirm whether

>>> Windows should automatically remove

>>> Mandatory profiles when the user logs off, and if so can anyone

>>> suggest why a copy of the profiles are being left behind ?

>>>

>>> Similarly can anyone recommend how we can allow users with a basic

>>> domain user account (no roaming or mandatory profile) to logon to

>>> our XP workstations such that their locally created profile is

>>> automatically deleted when they logoff ? i.e. no matter the user

>>> type (even domain admin if possible) we would like to remove any

>>> locally stored user profiles.

>>>

>>> Thanks,

>>> Alex.

[Guest Al Dunbar]

Re: Delete cached local copy of mandatory profile and non roaming domain user profiles ?

 

Re: Delete cached local copy of mandatory profile and non roaming domain user profiles ?

 

 

"Lanwench [MVP - Exchange]"

<lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message

news:eo7h2ChrIHA.4788@TK2MSFTNGP03.phx.gbl...

> Herb Martin <news@learnquick.com> wrote:

>> "S. Pidgorny <MVP>" <slavickp@yahoo.com> wrote in message

>> news:%23gJ1UiYrIHA.3616@TK2MSFTNGP06.phx.gbl...

>>> Create a computer startup script that deletes the local profiles if

>>> they are of a concern to you. Users won't be able to delete profiles

>>> as a part of logoff process.

>>

>> One of the fastest methods to (permanently) delete a directory

>> tree is: "del /s /q PATH"

>>

>> /s = subdirectory /q = quite (no warnings)

>>

>> This is VERY dangerous as it will (usually*) delete everything in it

>> without further warning so get the PATH correct. * Unless files

>> are locked but at startup that is unlikely.

>>

>> A "for /d" (directories) loop can get all directories but be careful

>> not to delete the Default (or other profiles you wish to keep.)

>

> Hence, using delprof instead would be a very simple alternative :-)

 

That's not the only reason, as references to the profiles would still appear

in the registry once the profile folder was deleted.

 

/Al

>>

>>> --

>>> Svyatoslav Pidgorny, MS MVP - Security, MCSE

>>> -= F1 is the key =-

>>>

>>> * http://sl.mvps.org * http://msmvps.com/blogs/sp *

>>>

>>> "Alex" <email@microsoft.newsgroups> wrote in message

>>> news:%23WdbaD3qIHA.1436@TK2MSFTNGP05.phx.gbl...

>>>> Hi. We are currently looking to deploy some Windows XP

>>>> workstations on a 2003 Domain for development purposes. We are

>>>> using a mix of mandatory profiles and general domain users that

>>>> have NO roaming or mandatory profile. We are finding that the XP

>>>> workstations are storing a local copy of the mandatory profiles and

>>>> the gerneral domain user accounts as well. Can anyone confirm whether

>>>> Windows should automatically remove

>>>> Mandatory profiles when the user logs off, and if so can anyone

>>>> suggest why a copy of the profiles are being left behind ?

>>>>

>>>> Similarly can anyone recommend how we can allow users with a basic

>>>> domain user account (no roaming or mandatory profile) to logon to

>>>> our XP workstations such that their locally created profile is

>>>> automatically deleted when they logoff ? i.e. no matter the user

>>>> type (even domain admin if possible) we would like to remove any

>>>> locally stored user profiles.

>>>>

>>>> Thanks,

>>>> Alex.

>

>

>

[Guest Lanwench [MVP - Exchange]]

Re: Delete cached local copy of mandatory profile and non roaming domain user profiles ?

 

Re: Delete cached local copy of mandatory profile and non roaming domain user profiles ?

 

Al Dunbar <AlanDrub@hotmail.com.nospaam> wrote:

> "Lanwench [MVP - Exchange]"

> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in

> message news:eo7h2ChrIHA.4788@TK2MSFTNGP03.phx.gbl...

>> Herb Martin <news@learnquick.com> wrote:

>>> "S. Pidgorny <MVP>" <slavickp@yahoo.com> wrote in message

>>> news:%23gJ1UiYrIHA.3616@TK2MSFTNGP06.phx.gbl...

>>>> Create a computer startup script that deletes the local profiles if

>>>> they are of a concern to you. Users won't be able to delete

>>>> profiles as a part of logoff process.

>>>

>>> One of the fastest methods to (permanently) delete a directory

>>> tree is: "del /s /q PATH"

>>>

>>> /s = subdirectory /q = quite (no warnings)

>>>

>>> This is VERY dangerous as it will (usually*) delete everything in it

>>> without further warning so get the PATH correct. * Unless files

>>> are locked but at startup that is unlikely.

>>>

>>> A "for /d" (directories) loop can get all directories but be careful

>>> not to delete the Default (or other profiles you wish to keep.)

>>

>> Hence, using delprof instead would be a very simple alternative :-)

>

> That's not the only reason, as references to the profiles would still

> appear in the registry once the profile folder was deleted.

>

> /Al

 

Yep, that too.

>

>>>

>>>> --

>>>> Svyatoslav Pidgorny, MS MVP - Security, MCSE

>>>> -= F1 is the key =-

>>>>

>>>> * http://sl.mvps.org * http://msmvps.com/blogs/sp *

>>>>

>>>> "Alex" <email@microsoft.newsgroups> wrote in message

>>>> news:%23WdbaD3qIHA.1436@TK2MSFTNGP05.phx.gbl...

>>>>> Hi. We are currently looking to deploy some Windows XP

>>>>> workstations on a 2003 Domain for development purposes. We are

>>>>> using a mix of mandatory profiles and general domain users that

>>>>> have NO roaming or mandatory profile. We are finding that the XP

>>>>> workstations are storing a local copy of the mandatory profiles

>>>>> and the gerneral domain user accounts as well. Can anyone confirm

>>>>> whether Windows should automatically remove

>>>>> Mandatory profiles when the user logs off, and if so can anyone

>>>>> suggest why a copy of the profiles are being left behind ?

>>>>>

>>>>> Similarly can anyone recommend how we can allow users with a basic

>>>>> domain user account (no roaming or mandatory profile) to logon to

>>>>> our XP workstations such that their locally created profile is

>>>>> automatically deleted when they logoff ? i.e. no matter the user

>>>>> type (even domain admin if possible) we would like to remove any

>>>>> locally stored user profiles.

>>>>>

>>>>> Thanks,

>>>>> Alex.