| Author | Messages | |
r00tb00t
Posts:13
 | | 10/07/2008 8:19 AM |
| Hey Guys,
After reading the recent on going post titled "GPO For deleting Temp Items"
I have decided to post here as I am after something similar. I am finding
that after a user has logged onto a machine their profile folder is now
located on that machine at C:\Documents and Settings\<username>" as it
should be, however; In the case of my class rooms and teaching labs, I have
50+ folders in the Documents and Settings folder for any user that has every
logged onto that machine. This includes user that don't exist anymore, so
for example after a student completes their course with us and their user
account is deleted from our domain, there user folder may be on 25 machines?
Is there a GPO to delete that folder after the user logs out? I'm sure I did
see this somewhere in GPEdit, something like "Don't Cache User Credentials"
or something but I can't remember where (I can't remember a lot of things!).
After reading the recent posting titled "GPO For deleting Temp Items" I
wondere if perhaps there was a logoff script that could run that would be
someting like:
DEL /S /Q /F "C:\Documents and Settings\*.*" (but not touch the
"Administrator" folder or the "All Users" (or the hiddens ones like "SYSTEM"
etc).?
Can anyone advise on what would be the best approach to deal with this. A
lot of our courses are music based thus a lot of large files are being
chucken around. We used mapped network drives so when profiles in the GB's
they aren't taking ages to log on but when it comes to editing the audio
masses of temporary files are building up.
Thanks for your time and input.
Regards,
Bensley.
| | | |
| pwiel
Posts:1
| | 10/07/2008 8:25 AM |
| First cleanup the deafult user profile on each course machine.
Regards,
Peter van der Wiel
Senior Support / GDSS
Reed Elsevier Technology Services
P Please consider the environment before printing this e-mail.
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of James Bensley
Sent: 07 October 2008 14:15
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Clean Machines After User Logout
Hey Guys,
After reading the recent on going post titled "GPO For deleting Temp
Items" I have decided to post here as I am after something similar. I am
finding that after a user has logged onto a machine their profile folder
is now located on that machine at C:\Documents and Settings\<username>"
as it should be, however; In the case of my class rooms and teaching
labs, I have 50+ folders in the Documents and Settings folder for any
user that has every logged onto that machine. This includes user that
don't exist anymore, so for example after a student completes their
course with us and their user account is deleted from our domain, there
user folder may be on 25 machines?
Is there a GPO to delete that folder after the user logs out? I'm sure I
did see this somewhere in GPEdit, something like "Don't Cache User
Credentials" or something but I can't remember where (I can't remember a
lot of things!).
After reading the recent posting titled "GPO For deleting Temp Items" I
wondere if perhaps there was a logoff script that could run that would
be someting like:
DEL /S /Q /F "C:\Documents and Settings\*.*" (but not touch the
"Administrator" folder or the "All Users" (or the hiddens ones like
"SYSTEM" etc).?
Can anyone advise on what would be the best approach to deal with this.
A lot of our courses are music based thus a lot of large files are being
chucken around. We used mapped network drives so when profiles in the
GB's they aren't taking ages to log on but when it comes to editing the
audio masses of temporary files are building up.
Thanks for your time and input.
Regards,
Bensley.
Elsevier B.V. Registered Office: Radarweg 29, 1043 NX Amsterdam, The Netherlands, Registration No. 33156677 (The Netherlands)
| | | |
| barbermj
Posts:7
| | 10/07/2008 8:31 AM |
| There is a new Vista only Group Policy setting called "Delete user
profiles older than a specified number of days on system restart," but I
don't know of one for XP. Unless someone else does, you could probably
script it like you were thinking.
Take care,
Matt Barber
Network Analyst / PC Support
Morrisville State College
315-684-6053
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of James Bensley
Sent: Tuesday, October 07, 2008 8:15 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Clean Machines After User Logout
Hey Guys,
After reading the recent on going post titled "GPO For deleting Temp
Items" I have decided to post here as I am after something similar. I am
finding that after a user has logged onto a machine their profile folder
is now located on that machine at C:\Documents and Settings\<username>"
as it should be, however; In the case of my class rooms and teaching
labs, I have 50+ folders in the Documents and Settings folder for any
user that has every logged onto that machine. This includes user that
don't exist anymore, so for example after a student completes their
course with us and their user account is deleted from our domain, there
user folder may be on 25 machines?
Is there a GPO to delete that folder after the user logs out? I'm sure I
did see this somewhere in GPEdit, something like "Don't Cache User
Credentials" or something but I can't remember where (I can't remember a
lot of things!).
After reading the recent posting titled "GPO For deleting Temp Items" I
wondere if perhaps there was a logoff script that could run that would
be someting like:
DEL /S /Q /F "C:\Documents and Settings\*.*" (but not touch the
"Administrator" folder or the "All Users" (or the hiddens ones like
"SYSTEM" etc).?
Can anyone advise on what would be the best approach to deal with this.
A lot of our courses are music based thus a lot of large files are being
chucken around. We used mapped network drives so when profiles in the
GB's they aren't taking ages to log on but when it comes to editing the
audio masses of temporary files are building up.
Thanks for your time and input.
Regards,
Bensley.
| | | |
| darren
Posts:154
| | 10/07/2008 9:36 AM |
| For XP/2003 systems, there is no equivalent to that Vista policy except to
use delprof.exe on some kind of scripted basis. You can't simply delete
c:\documents and settings to properly clean up profiles since references to
them are held in the registry as well. Delprof.exe will work as long as it
has permissions and the profile is not in use, so the ideal scenario is to
run it when a user is not logged on (e.g. startup script) .
Darren
****
Darren Mar-Elia
CTO & Founder
SDM Software, Inc.
"The Group Policy Experts"
www.sdmsoftware.com <http://www.sdmsoftware.com/>
Automate Group Policy audits and changes with the GPExpertT
Scripting Toolkit http://www.sdmsoftware.com/group_policy_scripting
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Barber, Matt
Sent: Tuesday, October 07, 2008 5:28 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Clean Machines After User Logout
There is a new Vista only Group Policy setting called "Delete user profiles
older than a specified number of days on system restart," but I don't know
of one for XP. Unless someone else does, you could probably script it like
you were thinking.
Take care,
Matt Barber
Network Analyst / PC Support
Morrisville State College
315-684-6053
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of James Bensley
Sent: Tuesday, October 07, 2008 8:15 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Clean Machines After User Logout
Hey Guys,
After reading the recent on going post titled "GPO For deleting Temp Items"
I have decided to post here as I am after something similar. I am finding
that after a user has logged onto a machine their profile folder is now
located on that machine at C:\Documents and Settings\<username>" as it
should be, however; In the case of my class rooms and teaching labs, I have
50+ folders in the Documents and Settings folder for any user that has every
logged onto that machine. This includes user that don't exist anymore, so
for example after a student completes their course with us and their user
account is deleted from our domain, there user folder may be on 25 machines?
Is there a GPO to delete that folder after the user logs out? I'm sure I did
see this somewhere in GPEdit, something like "Don't Cache User Credentials"
or something but I can't remember where (I can't remember a lot of things!).
After reading the recent posting titled "GPO For deleting Temp Items" I
wondere if perhaps there was a logoff script that could run that would be
someting like:
DEL /S /Q /F "C:\Documents and Settings\*.*" (but not touch the
"Administrator" folder or the "All Users" (or the hiddens ones like "SYSTEM"
etc).?
Can anyone advise on what would be the best approach to deal with this. A
lot of our courses are music based thus a lot of large files are being
chucken around. We used mapped network drives so when profiles in the GB's
they aren't taking ages to log on but when it comes to editing the audio
masses of temporary files are building up.
Thanks for your time and input.
Regards,
Bensley.
| | | |
| pglenn
Posts:7
| | 10/07/2008 11:08 AM |
| We don't use any GPO settings. Rather, on our 1000 or so machines used for
student labs, we started using Deep Freeze. Much easier for us and takes
care of a lot of problems. Our trouble calls have decreased by about 90%
since installing it.
Paul Glenn
University of Kentucky
On Tue, Oct 7, 2008 at 9:33 AM, Darren Mar-Elia <darren@sdmsoftware.com>wrote:
> For XP/2003 systems, there is no equivalent to that Vista policy except
> to use delprof.exe on some kind of scripted basis. You can't simply delete
> c:\documents and settings to properly clean up profiles since references to
> them are held in the registry as well. Delprof.exe will work as long as it
> has permissions and the profile is not in use, so the ideal scenario is to
> run it when a user is not logged on (e.g. startup script) .
>
>
>
> Darren
>
>
>
>
>
> ****
>
> Darren Mar-Elia
>
> CTO & Founder
>
> SDM Software, Inc.
>
> "*The Group Policy Experts"*
>
> www.sdmsoftware.com
>
> Automate Group Policy audits and changes with the *GPExpert™*
>
> *Scripting Toolkit* http://www.sdmsoftware.com/group_policy_scripting
>
>
>
>
>
>
>
> *From:* ActiveDir-owner@mail.activedir.org [mailto:
> ActiveDir-owner@mail.activedir.org] *On Behalf Of *Barber, Matt
> *Sent:* Tuesday, October 07, 2008 5:28 AM
> *To:* ActiveDir@mail.activedir.org
> *Subject:* RE: [ActiveDir] Clean Machines After User Logout
>
>
>
> There is a new Vista only Group Policy setting called "Delete user profiles
> older than a specified number of days on system restart," but I don't know
> of one for XP. Unless someone else does, you could probably script it like
> you were thinking.
>
>
>
> Take care,
>
>
>
> *Matt Barber*
>
> Network Analyst / PC Support
>
> Morrisville State College
>
> 315-684-6053
>
>
>
> *From:* ActiveDir-owner@mail.activedir.org [mailto:
> ActiveDir-owner@mail.activedir.org] *On Behalf Of *James Bensley
> *Sent:* Tuesday, October 07, 2008 8:15 AM
> *To:* ActiveDir@mail.activedir.org
> *Subject:* [ActiveDir] Clean Machines After User Logout
>
>
>
> Hey Guys,
>
> After reading the recent on going post titled "GPO For deleting Temp
> Items" I have decided to post here as I am after something similar. I am
> finding that after a user has logged onto a machine their profile folder is
> now located on that machine at C:\Documents and Settings\<username>" as it
> should be, however; In the case of my class rooms and teaching labs, I have
> 50+ folders in the Documents and Settings folder for any user that has every
> logged onto that machine. This includes user that don't exist anymore, so
> for example after a student completes their course with us and their user
> account is deleted from our domain, there user folder may be on 25 machines?
>
> Is there a GPO to delete that folder after the user logs out? I'm sure I
> did see this somewhere in GPEdit, something like "Don't Cache User
> Credentials" or something but I can't remember where (I can't remember a lot
> of things!).
>
> After reading the recent posting titled "GPO For deleting Temp Items" I
> wondere if perhaps there was a logoff script that could run that would be
> someting like:
>
> DEL /S /Q /F "C:\Documents and Settings\*.*" (but not touch the
> "Administrator" folder or the "All Users" (or the hiddens ones like "SYSTEM"
> etc).?
>
> Can anyone advise on what would be the best approach to deal with this. A
> lot of our courses are music based thus a lot of large files are being
> chucken around. We used mapped network drives so when profiles in the GB's
> they aren't taking ages to log on but when it comes to editing the audio
> masses of temporary files are building up.
>
> Thanks for your time and input.
>
> Regards,
> Bensley.
>
| | | |
| danholme
Posts:127
| | 10/07/2008 2:11 PM |
| You'll also want to look at Microsoft's Shared Computer Toolkit,
designed specifically with schools in mind...
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Paul Glenn
Sent: Tuesday, October 07, 2008 5:04 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Clean Machines After User Logout
We don't use any GPO settings. Rather, on our 1000 or so machines used
for
student labs, we started using Deep Freeze. Much easier for us and
takes
care of a lot of problems. Our trouble calls have decreased by about
90%
since installing it.
Paul Glenn
University of Kentucky
On Tue, Oct 7, 2008 at 9:33 AM, Darren Mar-Elia <darren@sdmsoftware.com>
wrote:
For XP/2003 systems, there is no equivalent to that Vista policy except
to use delprof.exe on some kind of scripted basis. You can't simply
delete c:\documents and settings to properly clean up profiles since
references to them are held in the registry as well. Delprof.exe will
work as long as it has permissions and the profile is not in use, so the
ideal scenario is to run it when a user is not logged on (e.g. startup
script) .
Darren
****
Darren Mar-Elia
CTO & Founder
SDM Software, Inc.
"The Group Policy Experts"
www.sdmsoftware.com <http://www.sdmsoftware.com/>
Automate Group Policy audits and changes with the GPExpert(tm)
Scripting Toolkit http://www.sdmsoftware.com/group_policy_scripting
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Barber, Matt
Sent: Tuesday, October 07, 2008 5:28 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Clean Machines After User Logout
There is a new Vista only Group Policy setting called "Delete user
profiles older than a specified number of days on system restart," but I
don't know of one for XP. Unless someone else does, you could probably
script it like you were thinking.
Take care,
Matt Barber
Network Analyst / PC Support
Morrisville State College
315-684-6053
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of James Bensley
Sent: Tuesday, October 07, 2008 8:15 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Clean Machines After User Logout
Hey Guys,
After reading the recent on going post titled "GPO For deleting Temp
Items" I have decided to post here as I am after something similar. I am
finding that after a user has logged onto a machine their profile folder
is now located on that machine at C:\Documents and Settings\<username>"
as it should be, however; In the case of my class rooms and teaching
labs, I have 50+ folders in the Documents and Settings folder for any
user that has every logged onto that machine. This includes user that
don't exist anymore, so for example after a student completes their
course with us and their user account is deleted from our domain, there
user folder may be on 25 machines?
Is there a GPO to delete that folder after the user logs out? I'm sure I
did see this somewhere in GPEdit, something like "Don't Cache User
Credentials" or something but I can't remember where (I can't remember a
lot of things!).
After reading the recent posting titled "GPO For deleting Temp Items" I
wondere if perhaps there was a logoff script that could run that would
be someting like:
DEL /S /Q /F "C:\Documents and Settings\*.*" (but not touch the
"Administrator" folder or the "All Users" (or the hiddens ones like
"SYSTEM" etc).?
Can anyone advise on what would be the best approach to deal with this.
A lot of our courses are music based thus a lot of large files are being
chucken around. We used mapped network drives so when profiles in the
GB's they aren't taking ages to log on but when it comes to editing the
audio masses of temporary files are building up.
Thanks for your time and input.
Regards,
Bensley.
| | | |
| laurahcomputing
Posts:41
| | 10/07/2008 3:04 PM |
| Or "SteadyState", as the MSFT Marketing folks have renamed the most recent
iteration thereof. It's pretty much the same functionality that the SCT
offered.
On Tue, Oct 7, 2008 at 1:36 PM, Dan Holme <dan.holme@intelliem.com> wrote:
> You'll also want to look at Microsoft's Shared Computer Toolkit, designed
> specifically with schools in mind…
>
>
>
> *From:* ActiveDir-owner@mail.activedir.org [mailto:
> ActiveDir-owner@mail.activedir.org] *On Behalf Of *Paul Glenn
> *Sent:* Tuesday, October 07, 2008 5:04 AM
> *To:* ActiveDir@mail.activedir.org
> *Subject:* Re: [ActiveDir] Clean Machines After User Logout
>
>
>
> We don't use any GPO settings. Rather, on our 1000 or so machines used for
> student labs, we started using Deep Freeze. Much easier for us and takes
> care of a lot of problems. Our trouble calls have decreased by about 90%
> since installing it.
>
>
> Paul Glenn
> University of Kentucky
>
> On Tue, Oct 7, 2008 at 9:33 AM, Darren Mar-Elia <darren@sdmsoftware.com>
> wrote:
>
> For XP/2003 systems, there is no equivalent to that Vista policy except to
> use delprof.exe on some kind of scripted basis. You can't simply delete
> c:\documents and settings to properly clean up profiles since references to
> them are held in the registry as well. Delprof.exe will work as long as it
> has permissions and the profile is not in use, so the ideal scenario is to
> run it when a user is not logged on (e.g. startup script) .
>
>
>
> Darren
>
>
>
>
>
> ****
>
> Darren Mar-Elia
>
> CTO & Founder
>
> SDM Software, Inc.
>
> "*The Group Policy Experts"*
>
> www.sdmsoftware.com
>
> Automate Group Policy audits and changes with the *GPExpert™*
>
> *Scripting Toolkit* http://www.sdmsoftware.com/group_policy_scripting
>
>
>
>
>
>
>
> *From:* ActiveDir-owner@mail.activedir.org [mailto:
> ActiveDir-owner@mail.activedir.org] *On Behalf Of *Barber, Matt
> *Sent:* Tuesday, October 07, 2008 5:28 AM
>
>
> *To:* ActiveDir@mail.activedir.org
>
> *Subject:* RE: [ActiveDir] Clean Machines After User Logout
>
>
>
> There is a new Vista only Group Policy setting called "Delete user profiles
> older than a specified number of days on system restart," but I don't know
> of one for XP. Unless someone else does, you could probably script it like
> you were thinking.
>
>
>
> Take care,
>
>
>
> *Matt Barber*
>
> Network Analyst / PC Support
>
> Morrisville State College
>
> 315-684-6053
>
>
>
> *From:* ActiveDir-owner@mail.activedir.org [mailto:
> ActiveDir-owner@mail.activedir.org] *On Behalf Of *James Bensley
> *Sent:* Tuesday, October 07, 2008 8:15 AM
> *To:* ActiveDir@mail.activedir.org
> *Subject:* [ActiveDir] Clean Machines After User Logout
>
>
>
> Hey Guys,
>
> After reading the recent on going post titled "GPO For deleting Temp Items"
> I have decided to post here as I am after something similar. I am finding
> that after a user has logged onto a machine their profile folder is now
> located on that machine at C:\Documents and Settings\<username>" as it
> should be, however; In the case of my class rooms and teaching labs, I have
> 50+ folders in the Documents and Settings folder for any user that has every
> logged onto that machine. This includes user that don't exist anymore, so
> for example after a student completes their course with us and their user
> account is deleted from our domain, there user folder may be on 25 machines?
>
> Is there a GPO to delete that folder after the user logs out? I'm sure I
> did see this somewhere in GPEdit, something like "Don't Cache User
> Credentials" or something but I can't remember where (I can't remember a lot
> of things!).
>
> After reading the recent posting titled "GPO For deleting Temp Items" I
> wondere if perhaps there was a logoff script that could run that would be
> someting like:
>
> DEL /S /Q /F "C:\Documents and Settings\*.*" (but not touch the
> "Administrator" folder or the "All Users" (or the hiddens ones like "SYSTEM"
> etc).?
>
> Can anyone advise on what would be the best approach to deal with this. A
> lot of our courses are music based thus a lot of large files are being
> chucken around. We used mapped network drives so when profiles in the GB's
> they aren't taking ages to log on but when it comes to editing the audio
> masses of temporary files are building up.
>
> Thanks for your time and input.
>
> Regards,
> Bensley.
>
>
>
--
-----------------------
Laura E. Hunter
Architect, Oxford Computer Group (http://www.oxfordcomputergroup.com)
Microsoft MVP, Directory Services (
https://mvp.support.microsoft.com/profile/laura)
Author, Active Directory Consultant's Field Guide (http://tinyurl.com/7f8ll)
Author, Active Directory Cookbook, Second Edition (http://tinyurl.com/z7svl)
| | | |
| kurtbuff
Posts:26
| | 10/07/2008 4:05 PM |
| Oh, my.
I think this will prove useful at several computers in my organization.
Very nice!
Thanks for the hint.
Kurt
On Tue, Oct 7, 2008 at 12:00 PM, Laura E. Hunter
<laurahcomputing@gmail.com> wrote:
> Or "SteadyState", as the MSFT Marketing folks have renamed the most recent
> iteration thereof. It's pretty much the same functionality that the SCT
> offered.
>
> On Tue, Oct 7, 2008 at 1:36 PM, Dan Holme <dan.holme@intelliem.com> wrote:
>>
>> You'll also want to look at Microsoft's Shared Computer Toolkit, designed
>> specifically with schools in mind…
>>
>>
>>
>> From: ActiveDir-owner@mail.activedir.org
>> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Paul Glenn
>> Sent: Tuesday, October 07, 2008 5:04 AM
>> To: ActiveDir@mail.activedir.org
>> Subject: Re: [ActiveDir] Clean Machines After User Logout
>>
>>
>>
>> We don't use any GPO settings. Rather, on our 1000 or so machines used
>> for
>> student labs, we started using Deep Freeze. Much easier for us and takes
>> care of a lot of problems. Our trouble calls have decreased by about 90%
>> since installing it.
>>
>> Paul Glenn
>> University of Kentucky
>>
>> On Tue, Oct 7, 2008 at 9:33 AM, Darren Mar-Elia <darren@sdmsoftware.com>
>> wrote:
>>
>> For XP/2003 systems, there is no equivalent to that Vista policy except to
>> use delprof.exe on some kind of scripted basis. You can't simply delete
>> c:\documents and settings to properly clean up profiles since references to
>> them are held in the registry as well. Delprof.exe will work as long as it
>> has permissions and the profile is not in use, so the ideal scenario is to
>> run it when a user is not logged on (e.g. startup script) .
>>
>>
>>
>> Darren
>>
>>
>>
>>
>>
>> ****
>>
>> Darren Mar-Elia
>>
>> CTO & Founder
>>
>> SDM Software, Inc.
>>
>> "The Group Policy Experts"
>>
>> www.sdmsoftware.com
>>
>> Automate Group Policy audits and changes with the GPExpert™
>>
>> Scripting Toolkit http://www.sdmsoftware.com/group_policy_scripting
>>
>>
>>
>>
>>
>>
>>
>> From: ActiveDir-owner@mail.activedir.org
>> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Barber, Matt
>> Sent: Tuesday, October 07, 2008 5:28 AM
>>
>> To: ActiveDir@mail.activedir.org
>>
>> Subject: RE: [ActiveDir] Clean Machines After User Logout
>>
>>
>>
>> There is a new Vista only Group Policy setting called "Delete user
>> profiles older than a specified number of days on system restart," but I
>> don't know of one for XP. Unless someone else does, you could probably
>> script it like you were thinking.
>>
>>
>>
>> Take care,
>>
>>
>>
>> Matt Barber
>>
>> Network Analyst / PC Support
>>
>> Morrisville State College
>>
>> 315-684-6053
>>
>>
>>
>> From: ActiveDir-owner@mail.activedir.org
>> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of James Bensley
>> Sent: Tuesday, October 07, 2008 8:15 AM
>> To: ActiveDir@mail.activedir.org
>> Subject: [ActiveDir] Clean Machines After User Logout
>>
>>
>>
>> Hey Guys,
>>
>> After reading the recent on going post titled "GPO For deleting Temp
>> Items" I have decided to post here as I am after something similar. I am
>> finding that after a user has logged onto a machine their profile folder is
>> now located on that machine at C:\Documents and Settings\<username>" as it
>> should be, however; In the case of my class rooms and teaching labs, I have
>> 50+ folders in the Documents and Settings folder for any user that has every
>> logged onto that machine. This includes user that don't exist anymore, so
>> for example after a student completes their course with us and their user
>> account is deleted from our domain, there user folder may be on 25 machines?
>>
>> Is there a GPO to delete that folder after the user logs out? I'm sure I
>> did see this somewhere in GPEdit, something like "Don't Cache User
>> Credentials" or something but I can't remember where (I can't remember a lot
>> of things!).
>>
>> After reading the recent posting titled "GPO For deleting Temp Items" I
>> wondere if perhaps there was a logoff script that could run that would be
>> someting like:
>>
>> DEL /S /Q /F "C:\Documents and Settings\*.*" (but not touch the
>> "Administrator" folder or the "All Users" (or the hiddens ones like "SYSTEM"
>> etc).?
>>
>> Can anyone advise on what would be the best approach to deal with this. A
>> lot of our courses are music based thus a lot of large files are being
>> chucken around. We used mapped network drives so when profiles in the GB's
>> they aren't taking ages to log on but when it comes to editing the audio
>> masses of temporary files are building up.
>>
>> Thanks for your time and input.
>>
>> Regards,
>> Bensley.
>>
>>
>
>
> --
> -----------------------
> Laura E. Hunter
> Architect, Oxford Computer Group (http://www.oxfordcomputergroup.com)
> Microsoft MVP, Directory Services
> (https://mvp.support.microsoft.com/profile/laura)
> Author, Active Directory Consultant's Field Guide (http://tinyurl.com/7f8ll)
> Author, Active Directory Cookbook, Second Edition (http://tinyurl.com/z7svl)
>
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
| | | |
| PARRIS
Posts:95
| | 10/07/2008 4:17 PM |
| Having played with Steadystate this line from the 2.5 user guide sums it up.
"Group Policy is more effective than using Windows SteadyState for
restricting multiple user accounts across numerous computers on a domain
network."
It is almost there, but not quite...
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Laura E. Hunter
Sent: 07 October 2008 20:01
To: ActiveDir@mail.activedir.org
Subject: AD: Re: [ActiveDir] Clean Machines After User Logout
Or "SteadyState", as the MSFT Marketing folks have renamed the most recent
iteration thereof. It's pretty much the same functionality that the SCT
offered.
On Tue, Oct 7, 2008 at 1:36 PM, Dan Holme <dan.holme@intelliem.com> wrote:
You'll also want to look at Microsoft's Shared Computer Toolkit, designed
specifically with schools in mind.
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Paul Glenn
Sent: Tuesday, October 07, 2008 5:04 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Clean Machines After User Logout
We don't use any GPO settings. Rather, on our 1000 or so machines used for
student labs, we started using Deep Freeze. Much easier for us and takes
care of a lot of problems. Our trouble calls have decreased by about 90%
since installing it.
Paul Glenn
University of Kentucky
On Tue, Oct 7, 2008 at 9:33 AM, Darren Mar-Elia <darren@sdmsoftware.com>
wrote:
For XP/2003 systems, there is no equivalent to that Vista policy except to
use delprof.exe on some kind of scripted basis. You can't simply delete
c:\documents and settings to properly clean up profiles since references to
them are held in the registry as well. Delprof.exe will work as long as it
has permissions and the profile is not in use, so the ideal scenario is to
run it when a user is not logged on (e.g. startup script) .
Darren
****
Darren Mar-Elia
CTO & Founder
SDM Software, Inc.
"The Group Policy Experts"
www.sdmsoftware.com <http://www.sdmsoftware.com/>
Automate Group Policy audits and changes with the GPExpertT
Scripting Toolkit http://www.sdmsoftware.com/group_policy_scripting
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Barber, Matt
Sent: Tuesday, October 07, 2008 5:28 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Clean Machines After User Logout
There is a new Vista only Group Policy setting called "Delete user profiles
older than a specified number of days on system restart," but I don't know
of one for XP. Unless someone else does, you could probably script it like
you were thinking.
Take care,
Matt Barber
Network Analyst / PC Support
Morrisville State College
315-684-6053
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of James Bensley
Sent: Tuesday, October 07, 2008 8:15 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Clean Machines After User Logout
Hey Guys,
After reading the recent on going post titled "GPO For deleting Temp Items"
I have decided to post here as I am after something similar. I am finding
that after a user has logged onto a machine their profile folder is now
located on that machine at C:\Documents and Settings\<username>" as it
should be, however; In the case of my class rooms and teaching labs, I have
50+ folders in the Documents and Settings folder for any user that has every
logged onto that machine. This includes user that don't exist anymore, so
for example after a student completes their course with us and their user
account is deleted from our domain, there user folder may be on 25 machines?
Is there a GPO to delete that folder after the user logs out? I'm sure I did
see this somewhere in GPEdit, something like "Don't Cache User Credentials"
or something but I can't remember where (I can't remember a lot of things!).
After reading the recent posting titled "GPO For deleting Temp Items" I
wondere if perhaps there was a logoff script that could run that would be
someting like:
DEL /S /Q /F "C:\Documents and Settings\*.*" (but not touch the
"Administrator" folder or the "All Users" (or the hiddens ones like "SYSTEM"
etc).?
Can anyone advise on what would be the best approach to deal with this. A
lot of our courses are music based thus a lot of large files are being
chucken around. We used mapped network drives so when profiles in the GB's
they aren't taking ages to log on but when it comes to editing the audio
masses of temporary files are building up.
Thanks for your time and input.
Regards,
Bensley.
--
-----------------------
Laura E. Hunter
Architect, Oxford Computer Group (http://www.oxfordcomputergroup.com)
Microsoft MVP, Directory Services
(https://mvp.support.microsoft.com/profile/laura)
Author, Active Directory Consultant's Field Guide (http://tinyurl.com/7f8ll)
Author, Active Directory Cookbook, Second Edition (http://tinyurl.com/z7svl)
| | | |
| bdesmond
Posts:347
| | 10/07/2008 4:37 PM |
| Is this a Microsoft competitor to products like DeepFreeze and Fortress?
Thanks,
Brian Desmond
brian@briandesmond.com
c - 312.731.3132
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Mark Parris
Sent: Tuesday, October 07, 2008 2:52 PM
To: ActiveDir@mail.activedir.org
Subject: RE: Re: [ActiveDir] Clean Machines After User Logout
Having played with Steadystate this line from the 2.5 user guide sums it up.
"Group Policy is more effective than using Windows SteadyState for restricting multiple user accounts across numerous computers on a domain network."
It is almost there, but not quite.....
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Laura E. Hunter
Sent: 07 October 2008 20:01
To: ActiveDir@mail.activedir.org
Subject: AD: Re: [ActiveDir] Clean Machines After User Logout
Or "SteadyState", as the MSFT Marketing folks have renamed the most recent iteration thereof. It's pretty much the same functionality that the SCT offered.
On Tue, Oct 7, 2008 at 1:36 PM, Dan Holme <dan.holme@intelliem.com<mailto:dan.holme@intelliem.com>> wrote:
You'll also want to look at Microsoft's Shared Computer Toolkit, designed specifically with schools in mind...
From: ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org> [mailto:ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org>] On Behalf Of Paul Glenn
Sent: Tuesday, October 07, 2008 5:04 AM
To: ActiveDir@mail.activedir.org<mailto:ActiveDir@mail.activedir.org>
Subject: Re: [ActiveDir] Clean Machines After User Logout
We don't use any GPO settings. Rather, on our 1000 or so machines used for
student labs, we started using Deep Freeze. Much easier for us and takes
care of a lot of problems. Our trouble calls have decreased by about 90%
since installing it.
Paul Glenn
University of Kentucky
On Tue, Oct 7, 2008 at 9:33 AM, Darren Mar-Elia <darren@sdmsoftware.com<mailto:darren@sdmsoftware.com>> wrote:
For XP/2003 systems, there is no equivalent to that Vista policy except to use delprof.exe on some kind of scripted basis. You can't simply delete c:\documents and settings to properly clean up profiles since references to them are held in the registry as well. Delprof.exe will work as long as it has permissions and the profile is not in use, so the ideal scenario is to run it when a user is not logged on (e.g. startup script) .
Darren
****
Darren Mar-Elia
CTO & Founder
SDM Software, Inc.
"The Group Policy Experts"
www.sdmsoftware.com<http://www.sdmsoftware.com/>
Automate Group Policy audits and changes with the GPExpert(tm)
Scripting Toolkit http://www.sdmsoftware.com/group_policy_scripting
From: ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org> [mailto:ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org>] On Behalf Of Barber, Matt
Sent: Tuesday, October 07, 2008 5:28 AM
To: ActiveDir@mail.activedir.org<mailto:ActiveDir@mail.activedir.org>
Subject: RE: [ActiveDir] Clean Machines After User Logout
There is a new Vista only Group Policy setting called "Delete user profiles older than a specified number of days on system restart," but I don't know of one for XP. Unless someone else does, you could probably script it like you were thinking.
Take care,
Matt Barber
Network Analyst / PC Support
Morrisville State College
315-684-6053
From: ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org> [mailto:ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org>] On Behalf Of James Bensley
Sent: Tuesday, October 07, 2008 8:15 AM
To: ActiveDir@mail.activedir.org<mailto:ActiveDir@mail.activedir.org>
Subject: [ActiveDir] Clean Machines After User Logout
Hey Guys,
After reading the recent on going post titled "GPO For deleting Temp Items" I have decided to post here as I am after something similar. I am finding that after a user has logged onto a machine their profile folder is now located on that machine at C:\Documents and Settings\<username>" as it should be, however; In the case of my class rooms and teaching labs, I have 50+ folders in the Documents and Settings folder for any user that has every logged onto that machine. This includes user that don't exist anymore, so for example after a student completes their course with us and their user account is deleted from our domain, there user folder may be on 25 machines?
Is there a GPO to delete that folder after the user logs out? I'm sure I did see this somewhere in GPEdit, something like "Don't Cache User Credentials" or something but I can't remember where (I can't remember a lot of things!).
After reading the recent posting titled "GPO For deleting Temp Items" I wondere if perhaps there was a logoff script that could run that would be someting like:
DEL /S /Q /F "C:\Documents and Settings\*.*" (but not touch the "Administrator" folder or the "All Users" (or the hiddens ones like "SYSTEM" etc).?
Can anyone advise on what would be the best approach to deal with this. A lot of our courses are music based thus a lot of large files are being chucken around. We used mapped network drives so when profiles in the GB's they aren't taking ages to log on but when it comes to editing the audio masses of temporary files are building up.
Thanks for your time and input.
Regards,
Bensley.
--
-----------------------
Laura E. Hunter
Architect, Oxford Computer Group (http://www.oxfordcomputergroup.com)
Microsoft MVP, Directory Services (https://mvp.support.microsoft.com/profile/laura)
Author, Active Directory Consultant's Field Guide (http://tinyurl.com/7f8ll)
Author, Active Directory Cookbook, Second Edition (http://tinyurl.com/z7svl)
| | | |
| r00tb00t
Posts:13
| | 10/08/2008 6:06 AM |
| Thanks for the input guys;
I have looked at Deep Freeze, seem like a good idea but our budget is
£00000.00! Hah! It would be nice but since the lack of funds, it out of
reach which is a shame but I wouldn't want to go round installing it
everwhere, setting it up etc.
With the SteadyState, again I wouldn't want to go round setting it up every
etc and all im looking for is a wait to delete stored profiles, everything
that SteadyState offers I can (and already do) do with GPOs so again thats
that idea out the window.
Instead I went for Darren's idea of using delprof.exe. So I just chucked a
batch script together to copy delprof.exe from my server to all my clients
and then another ro run it which is appled in GPO's.
Thanks for all the help guys it was good to see various solutions.
Another awesome solution from the awesome list!
Regards,
Bensley 
| | | |
|
|