mobsync.exe in registry

[Gibbo]

I'm finding mobsync.exe /logon appearing on quite a few staff laptops under HKLM - Software - Microsoft - Windows - Current Version - Run

 

..ever since I found my techie messing with offline files on a teachers laptop without my knowledge.

 

I've got all offline files disabled in group policy but it seems that this one is getting through.

 

Can this be disabled in group policy, and if so, where?

 

TIA

[Michael]

I'm not sure (even with Offline Files disabled by GPO) whether this entry still runs. There are Offline Files Policies both in Computer Config and User Config. I'd recommend disabling it in both areas.

 

I would experiment, but this registry entry should remove Synchronization Manager. Note the minus right after the equals.

 

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Synchronization Manager"=-

 

I'd recommend you create a backup just in case Windows requires this entry. You should be able to run this silent at logon.

[User3204]

You could add it to a Software Restriction policy...but this is a little drastic, and considering it's Microsoft, you probably need this file to run for something else.

[Azhibberd]

i'm pretty sure it still appears even if its disabled... and when i see it if it isn't a staff laptop i just removed it from the startup didn't cause any problems this end although make sure u test it before u deploy its removal.

[Gibbo]

Thanks for the advice chaps. I've been removing it manually from the laptops but was concerned something in GP was re-creating it when the laptop is connected.

 

The irritating thing is my techie doesn't know what he did to cause this issue.