Windows 7 non domain laptops any way to clear profile after each login?

[superatticman]

We have around 12 older laptops of which we want to convert to BYOD devices for ad hoc hire. They will have Windows 7 Pro installed on them. They are not going to be locked down in any way. However whilst they are going to be given out as 'public' machines, is there any way we can manage the profile so that if someone logs in to webmail for example and through habit checks 'remember password', that it can somehow force a 'clear' or reset the profile? we want to try and avoid the situation where a user ends up seeing another users email.

 

Chrome and IE11 are available to use on these. Ideally, we want to have just the one profile on there of which is not password protected and logs in automatically without intervention.

 

Cheers

[sted]

a startup script that runs delprof so it just nukes whatever profiles are on there at startup should do it

[dapaulio]

a startup script that runs delprof so it just nukes whatever profiles are on there at startup should do it

 

+1 Delprof

 

However I would script it in a shutdown script. Startup scripts tend to prolong the logon process where the user is waiting around. shutdown however it is likely the user has finished therefore the script will run without inconveniencing anyone. you can even declare an max age eg 7 days so the more frequent users are not waiting around for as long for the profile to be recreated.

[sted]

+1 Delprof

 

However I would script it in a shutdown script. Startup scripts tend to prolong the logon process where the user is waiting around. shutdown however it is likely the user has finished therefore the script will run without inconveniencing anyone. you can even declare an max age eg 7 days so the more frequent users are not waiting around for as long for the profile to be recreated.

 

ive found delprof dosent always wok as a shutdown as parts of the profile can still be in use when it runs sometimes

[dapaulio]

Afaik it still effectively removes all the files but shows as failed if it can’t delete the user folder (not an issue really with the age switch). And I guess Not much of a problem anyway as if any profiles fail due to this the next shutdown will cleanup what was missed last time.

[ADMaster]

All my suggestions here imply a bit of lock down but here goes.

Deep freeze or some alternative.

Windows 10 Kiosk mode.

Any reason you can't put W10 on them with that new feature?

 

There are GPO settings to disable the password manager and history.

 

I think you can create a shortcut that launches directly into incognito as well.

 

You can also use GPP to set the reg keys for auto log in. I've done this for a few machines such as xibo and papercut release stations.