Delete cached local copy of mandatory profile and non roaming domain user profiles ?

Hi. We are currently looking to deploy some Windows XP workstations on a
2003 Domain for development purposes. We are using a mix of mandatory
profiles and general domain users that have NO roaming or mandatory profile.
We are finding that the XP workstations are storing a local copy of the
mandatory profiles and the gerneral domain user accounts as well.

Can anyone confirm whether Windows should automatically remove Mandatory
profiles when the user logs off, and if so can anyone suggest why a copy of
the profiles are being left behind ?

Similarly can anyone recommend how we can allow users with a basic domain
user account (no roaming or mandatory profile) to logon to our XP
workstations such that their locally created profile is automatically
deleted when they logoff ? i.e. no matter the user type (even domain admin
if possible) we would like to remove any locally stored user profiles.

Thanks,
Alex.

Alex <(E-Mail Removed)> wrote:
> Hi. We are currently looking to deploy some Windows XP workstations
> on a 2003 Domain for development purposes. We are using a mix of
> mandatory profiles and general domain users that have NO roaming or
> mandatory profile. We are finding that the XP workstations are
> storing a local copy of the mandatory profiles and the gerneral
> domain user accounts as well.

Yep - that's normal.
>
> Can anyone confirm whether Windows should automatically remove
> Mandatory profiles when the user logs off,

Nope.

> and if so can anyone
> suggest why a copy of the profiles are being left behind ?

It's by design, as they say.
>
> Similarly can anyone recommend how we can allow users with a basic
> domain user account (no roaming or mandatory profile) to logon to our
> XP workstations such that their locally created profile is
> automatically deleted when they logoff ? i.e. no matter the user type
> (even domain admin if possible) we would like to remove any locally
> stored user profiles.
> Thanks,
> Alex.

For roaming profiles, this can be done in your group policy settings -
http://support.microsoft.com/kb/274152
For non-roaming, I'm not sure there's a policy option for it. However,
delprof certainly works -
http://windowsitpro.com/articles/pri...rticleid=48249

Personally - I always use roaming profiles (and folder redirection,so the
profiles stay tiny) and I also *want* a local copy cached on the machine to
eliminate the delay between a user logging in, and a user getting to work.
Just my $.02 and your environment may well be different.

Create a computer startup script that deletes the local profiles if they are
of a concern to you. Users won't be able to delete profiles as a part of
logoff process.

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

"Alex" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> Hi. We are currently looking to deploy some Windows XP workstations on a
> 2003 Domain for development purposes. We are using a mix of mandatory
> profiles and general domain users that have NO roaming or mandatory
> profile. We are finding that the XP workstations are storing a local copy
> of the mandatory profiles and the gerneral domain user accounts as well.
>
> Can anyone confirm whether Windows should automatically remove Mandatory
> profiles when the user logs off, and if so can anyone suggest why a copy
> of the profiles are being left behind ?
>
> Similarly can anyone recommend how we can allow users with a basic domain
> user account (no roaming or mandatory profile) to logon to our XP
> workstations such that their locally created profile is automatically
> deleted when they logoff ? i.e. no matter the user type (even domain admin
> if possible) we would like to remove any locally stored user profiles.
>
> Thanks,
> Alex.
>
>
>

"S. Pidgorny <MVP>" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> Create a computer startup script that deletes the local profiles if they
> are of a concern to you. Users won't be able to delete profiles as a part
> of logoff process.

One of the fastest methods to (permanently) delete a directory
tree is: "del /s /q PATH"

/s = subdirectory /q = quite (no warnings)

This is VERY dangerous as it will (usually*) delete everything in it
without further warning so get the PATH correct. * Unless files
are locked but at startup that is unlikely.

A "for /d" (directories) loop can get all directories but be careful
not to delete the Default (or other profiles you wish to keep.)

> --
> Svyatoslav Pidgorny, MS MVP - Security, MCSE
> -= F1 is the key =-
>
> * http://sl.mvps.org * http://msmvps.com/blogs/sp *
>
> "Alex" <(E-Mail Removed)> wrote in message
> news:%(E-Mail Removed)...
>> Hi. We are currently looking to deploy some Windows XP workstations on a
>> 2003 Domain for development purposes. We are using a mix of mandatory
>> profiles and general domain users that have NO roaming or mandatory
>> profile. We are finding that the XP workstations are storing a local copy
>> of the mandatory profiles and the gerneral domain user accounts as well.
>>
>> Can anyone confirm whether Windows should automatically remove Mandatory
>> profiles when the user logs off, and if so can anyone suggest why a copy
>> of the profiles are being left behind ?
>>
>> Similarly can anyone recommend how we can allow users with a basic domain
>> user account (no roaming or mandatory profile) to logon to our XP
>> workstations such that their locally created profile is automatically
>> deleted when they logoff ? i.e. no matter the user type (even domain
>> admin if possible) we would like to remove any locally stored user
>> profiles.
>>
>> Thanks,
>> Alex.
>>
>>
>>
>
>

Herb Martin <(E-Mail Removed)> wrote:
> "S. Pidgorny <MVP>" <(E-Mail Removed)> wrote in message
> news:%(E-Mail Removed)...
>> Create a computer startup script that deletes the local profiles if
>> they are of a concern to you. Users won't be able to delete profiles
>> as a part of logoff process.
>
> One of the fastest methods to (permanently) delete a directory
> tree is: "del /s /q PATH"
>
> /s = subdirectory /q = quite (no warnings)
>
> This is VERY dangerous as it will (usually*) delete everything in it
> without further warning so get the PATH correct. * Unless files
> are locked but at startup that is unlikely.
>
> A "for /d" (directories) loop can get all directories but be careful
> not to delete the Default (or other profiles you wish to keep.)

Hence, using delprof instead would be a very simple alternative :-)
>
>> --
>> Svyatoslav Pidgorny, MS MVP - Security, MCSE
>> -= F1 is the key =-
>>
>> * http://sl.mvps.org * http://msmvps.com/blogs/sp *
>>
>> "Alex" <(E-Mail Removed)> wrote in message
>> news:%(E-Mail Removed)...
>>> Hi. We are currently looking to deploy some Windows XP
>>> workstations on a 2003 Domain for development purposes. We are
>>> using a mix of mandatory profiles and general domain users that
>>> have NO roaming or mandatory profile. We are finding that the XP
>>> workstations are storing a local copy of the mandatory profiles and
>>> the gerneral domain user accounts as well. Can anyone confirm whether
>>> Windows should automatically remove
>>> Mandatory profiles when the user logs off, and if so can anyone
>>> suggest why a copy of the profiles are being left behind ?
>>>
>>> Similarly can anyone recommend how we can allow users with a basic
>>> domain user account (no roaming or mandatory profile) to logon to
>>> our XP workstations such that their locally created profile is
>>> automatically deleted when they logoff ? i.e. no matter the user
>>> type (even domain admin if possible) we would like to remove any
>>> locally stored user profiles.
>>>
>>> Thanks,
>>> Alex.

"Lanwench [MVP - Exchange]"
<(E-Mail Removed) hoo.com> wrote in message
news:(E-Mail Removed)...
> Herb Martin <(E-Mail Removed)> wrote:
>> "S. Pidgorny <MVP>" <(E-Mail Removed)> wrote in message
>> news:%(E-Mail Removed)...
>>> Create a computer startup script that deletes the local profiles if
>>> they are of a concern to you. Users won't be able to delete profiles
>>> as a part of logoff process.
>>
>> One of the fastest methods to (permanently) delete a directory
>> tree is: "del /s /q PATH"
>>
>> /s = subdirectory /q = quite (no warnings)
>>
>> This is VERY dangerous as it will (usually*) delete everything in it
>> without further warning so get the PATH correct. * Unless files
>> are locked but at startup that is unlikely.
>>
>> A "for /d" (directories) loop can get all directories but be careful
>> not to delete the Default (or other profiles you wish to keep.)
>
> Hence, using delprof instead would be a very simple alternative :-)

That's not the only reason, as references to the profiles would still appear
in the registry once the profile folder was deleted.

/Al

>>
>>> --
>>> Svyatoslav Pidgorny, MS MVP - Security, MCSE
>>> -= F1 is the key =-
>>>
>>> * http://sl.mvps.org * http://msmvps.com/blogs/sp *
>>>
>>> "Alex" <(E-Mail Removed)> wrote in message
>>> news:%(E-Mail Removed)...
>>>> Hi. We are currently looking to deploy some Windows XP
>>>> workstations on a 2003 Domain for development purposes. We are
>>>> using a mix of mandatory profiles and general domain users that
>>>> have NO roaming or mandatory profile. We are finding that the XP
>>>> workstations are storing a local copy of the mandatory profiles and
>>>> the gerneral domain user accounts as well. Can anyone confirm whether
>>>> Windows should automatically remove
>>>> Mandatory profiles when the user logs off, and if so can anyone
>>>> suggest why a copy of the profiles are being left behind ?
>>>>
>>>> Similarly can anyone recommend how we can allow users with a basic
>>>> domain user account (no roaming or mandatory profile) to logon to
>>>> our XP workstations such that their locally created profile is
>>>> automatically deleted when they logoff ? i.e. no matter the user
>>>> type (even domain admin if possible) we would like to remove any
>>>> locally stored user profiles.
>>>>
>>>> Thanks,
>>>> Alex.
>
>
>

Al Dunbar <(E-Mail Removed)> wrote:
> "Lanwench [MVP - Exchange]"
> <(E-Mail Removed) hoo.com> wrote in
> message news:(E-Mail Removed)...
>> Herb Martin <(E-Mail Removed)> wrote:
>>> "S. Pidgorny <MVP>" <(E-Mail Removed)> wrote in message
>>> news:%(E-Mail Removed)...
>>>> Create a computer startup script that deletes the local profiles if
>>>> they are of a concern to you. Users won't be able to delete
>>>> profiles as a part of logoff process.
>>>
>>> One of the fastest methods to (permanently) delete a directory
>>> tree is: "del /s /q PATH"
>>>
>>> /s = subdirectory /q = quite (no warnings)
>>>
>>> This is VERY dangerous as it will (usually*) delete everything in it
>>> without further warning so get the PATH correct. * Unless files
>>> are locked but at startup that is unlikely.
>>>
>>> A "for /d" (directories) loop can get all directories but be careful
>>> not to delete the Default (or other profiles you wish to keep.)
>>
>> Hence, using delprof instead would be a very simple alternative :-)
>
> That's not the only reason, as references to the profiles would still
> appear in the registry once the profile folder was deleted.
>
> /Al

Yep, that too.

>
>>>
>>>> --
>>>> Svyatoslav Pidgorny, MS MVP - Security, MCSE
>>>> -= F1 is the key =-
>>>>
>>>> * http://sl.mvps.org * http://msmvps.com/blogs/sp *
>>>>
>>>> "Alex" <(E-Mail Removed)> wrote in message
>>>> news:%(E-Mail Removed)...
>>>>> Hi. We are currently looking to deploy some Windows XP
>>>>> workstations on a 2003 Domain for development purposes. We are
>>>>> using a mix of mandatory profiles and general domain users that
>>>>> have NO roaming or mandatory profile. We are finding that the XP
>>>>> workstations are storing a local copy of the mandatory profiles
>>>>> and the gerneral domain user accounts as well. Can anyone confirm
>>>>> whether Windows should automatically remove
>>>>> Mandatory profiles when the user logs off, and if so can anyone
>>>>> suggest why a copy of the profiles are being left behind ?
>>>>>
>>>>> Similarly can anyone recommend how we can allow users with a basic
>>>>> domain user account (no roaming or mandatory profile) to logon to
>>>>> our XP workstations such that their locally created profile is
>>>>> automatically deleted when they logoff ? i.e. no matter the user
>>>>> type (even domain admin if possible) we would like to remove any
>>>>> locally stored user profiles.
>>>>>
>>>>> Thanks,
>>>>> Alex.

This might be related to you problem with mandatory clean-up on reboot:
http://support.microsoft.com/kb/89324

--
rula
-----------------------------------------------------------------------
rulan's Profile: http://forums.techarena.in/members/rulan.ht
View this thread: http://forums.techarena.in/server-networking/960024.ht

http://forums.techarena.i

rulan <(E-Mail Removed)> wrote:
> This might be related to you problem with mandatory clean-up on
> reboot: http://support.microsoft.com/kb/893243

Hi - looks like you're replying to an old post, which is no longer on the
news server. I suggest you use a newsreader rather than your web forum to
access these groups, so this is less likely to happen. Also, it's good to
quote the original message in your reply to make sure people know what
you're referring to.

Try Forte Agent, Thunderbird, or even Outlook Express. You can mark messages
to be watched, filter the views so you can see replies to your posts easily,
and search.

The Microsoft public news server is msnews.microsoft.com and you can
subscribe to as many groups as you like; no authentication is required.

The following is from a post by MVP Malke ...

-------------------------------------------------------
Here's information on Usenet and using a newsreader:

http://www.elephantboycomputers.com/page3.html#12-09-02 - a brief
explanation of newsgroups
http://michaelstevenstech.com/outlo...ssnewreader.htm
http://rickrogers.org/setupoe.htm
http://support.microsoft.com/defaul...wto/default.asp
- Set Up Newsreader

http://www.dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html
http://aumha.org/nntp.htm - list of MS newsgroups
microsoft.public.test.here - MS group to test if your newsreader is
working properly
http://www.mailmsg.com/SPAM_munging.htm - how to munge email address
http://www.blakjak.demon.co.uk/mul_crss.htm - multiposting vs.
crossposting

Some newsreaders for Windows
http://www.forteinc.com/agent/index.php - for Forte
http://www.mozilla.org (Thunderbird does newsgroups)
http://gravity.tbates.org/

-------------------------------------