Comments on: A funny thing happened on my way to the remote registry…

By: Aaron

Aaron — Fri, 24 Dec 2010 20:34:05 +0000

i enjoy you pointing this out due to the fact I have never ever viewed like like this. For that motive I could possibly point out some of your points by myself blog; I hope you're Okay with this. Do you suppose possibly from the future we can function collectively somehow between our websites? Inform me what you assume. SMS

By: RichRumble

RichRumble — Wed, 26 May 2010 12:10:42 +0000

@ProgrammableFun this is not true when using wmi to query StdRegProv, the profile will be updated or created even using psexec, winexe(linux). This only happens on XP, no Vista, Win7, 2003 or 2008.
-rich

By: ProgrammableFun

ProgrammableFun — Mon, 17 May 2010 04:40:52 +0000

We use psexec from sysinterals and use the switch that keeps it from creating a profile. Works for executing VBS, BAT, CMD and PS scripts. Plus, you can include a text file to execute on all machines from a remote box or you can run it via policy on login, shutdown or at a designated time.

By: jfrmilner

jfrmilner — Wed, 11 Nov 2009 16:41:47 +0000

You can use Delprof.exe to remotely clean up profiles.
Delprof.exe is available in the Windows Server 2003 Resource Kit.

By: Sirikan

Sirikan — Wed, 23 Sep 2009 02:13:11 +0000

Yeah I have a profile on every machine in the company for a similar reason too.

Management are not so touchy about IT staff having profiles on machines though so has never been an issue for me.

By: David Lucero

David Lucero — Fri, 21 Aug 2009 19:59:21 +0000

So maybe there is a script that can delete the profile acct after the info you want is returned?
DL

By: Merddyn

Merddyn — Tue, 23 Jun 2009 14:13:31 +0000

When you access StdRegProv, even via WMI, on a domain joined computer, in order to provide proper security, your account must be fully parsed. The reason is that, even if you are a domain admin as well as a local admin, group policy can affect what can and cannot be accessed or modified on a given system’s registry since, as we all know, group policy is really nothing more than a bunch of registry and ACL settings. In order to figure out your RSOP and your local rights, since you aren’t likely directly in the local admins group, your entire account context must be parsed. This causes the WinLogon service to launch which, by extension, causes a profile to be generated so that there is a place to store any temp files as well as your user profile information on the local system.

I hope that helps.

By: Jesse Hamrick

Jesse Hamrick — Thu, 18 Jun 2009 16:05:38 +0000

Can’t say that I have seen this when enumerating wmi classes. This points to what I noticed:
“Some testing verifies what you have seen. On XP machines a remote profile is created when using StdRegProv.”

Thanks for the link.

By: cptomlly

cptomlly — Thu, 18 Jun 2009 05:12:30 +0000

http://www.scriptinganswers.com/forum2/forum_posts.asp?TID=1278

Maybe this explains?

By: Jesse Hamrick

Jesse Hamrick — Wed, 17 Jun 2009 23:01:32 +0000

Added link to the script file at the end of the article.