Remote Registry Service

[kennysarmy]

I'm looking at DelProf2 to automatically remove some older profiles on PC's over say 30 days old, but one of the pre-requisites is that the Remote Registry Service is running.

 

By default our PC's have this set to MANUAL - so it's not running.

 

What security risk is there in creating a GPO that turns this to running across the site?

 

Or should I create a batch file that is called at logoff that starts it, runs DelProf2, then stops it again?

 

Cheers.

[gtg93]

sc \\ICTROOM-01 start remoteregistry

delprof2 /u /c:\\\\ICTROOM-01 /ed:administrator

sc \\ICTROOM-01 stop remoteregistry

 

This is what I use. First command starts remote registry service, second runs delprof2 (ignoring the administrator account) and the third stops remote registry service No need to keep remote registry running!

 

This can be used when people are logged on, as Delprof ignores the profile if it's in use.

 

 

edit: Obviously, just replace ICTROOM-01 with your computer name

Edited June 24, 2015 by gtg93

[kennysarmy]

sc \\ICTROOM-01 start remoteregistry

delprof2 /u /c:\\\\ICTROOM-01 /ed:administrator

sc \\ICTROOM-01 stop remoteregistry

 

This is what I use. First command starts remote registry service, second runs delprof2 (ignoring the administrator account) and the third stops remote registry service No need to keep remote registry running!

 

This can be used when people are logged on, as Delprof ignores the profile if it's in use.

 

 

edit: Obviously, just replace ICTROOM-01 with your computer name

 

Thanks.

 

But if I want to target a suite/room/area of PC's I need to run this as a starup or logoff script......

 

- - - Updated - - -

 

sc \\ICTROOM-01 start remoteregistry

delprof2 /u /c:\\\\ICTROOM-01 /ed:administrator

sc \\ICTROOM-01 stop remoteregistry

 

This is what I use. First command starts remote registry service, second runs delprof2 (ignoring the administrator account) and the third stops remote registry service No need to keep remote registry running!

 

This can be used when people are logged on, as Delprof ignores the profile if it's in use.

 

 

edit: Obviously, just replace ICTROOM-01 with your computer name

 

Thanks.

 

But if I want to target a suite/room/area of PC's I need to run this as a starup or logoff script......

[gtg93]

But if I want to target a suite/room/area of PC's I need to run this as a starup or logoff script......

 

Why? You just run this as a batch file from your PC, and it will run delprof on the PC(s) remotely.

[kennysarmy]

This might work:

 

Removing Unwanted User Profiles with Delprof - Wahl Network

[kennysarmy]

Why? You just run this as a batch file from your PC, and it will run delprof on the PC(s) remotely.

 

But not all 850 PC's on site are always turned on

[kennysarmy]

This might work:

 

Removing Unwanted User Profiles with Delprof - Wahl Network

 

Tested on some PC's and working well....