{"id":2861,"date":"2013-09-16T00:01:00","date_gmt":"2013-09-16T00:01:00","guid":{"rendered":"https:\/\/blogs.technet.microsoft.com\/heyscriptingguy\/2013\/09\/16\/conditional-user-profile-deletion-revisited\/"},"modified":"2013-09-16T00:01:00","modified_gmt":"2013-09-16T00:01:00","slug":"conditional-user-profile-deletion-revisited","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/scripting\/conditional-user-profile-deletion-revisited\/","title":{"rendered":"Conditional User Profile Deletion Revisited"},"content":{"rendered":"

Summary<\/strong>: Guest blogger, Bob Stevens, revises his script for conditional user profile removal.\nMicrosoft Scripting Guy, Ed Wilson, is here. I am happy to welcome back guest blogger, Bob Stevens<\/a>. Take it away Bob…\nPreviously I released a blog post entitled Weekend Scripter: Use PowerShell for Conditional User Profile Removal<\/a>. If you have not read this post, please do because it is necessary so that you’ll understand what I am talking about today.\nIt was pointed out to me that Windows Vista and later operating systems create temporary user directories instead of re-creating the directories when the user next signs in. To start at a reference point, here is the original script that I created:<\/p>\n

IF ((Get-WmiObject Win32_OperatingSystem).version -like “5*”) {<\/p>\n

$over30dayprofiles = @(Get-ChildItem -force “C:Documents and Settings” | Where {<\/p>\n

((Get-Date)-$_.lastwritetime).days -ge 30<\/p>\n

} )<\/p>\n

}<\/p>\n

IF ((Get-WmiObject Win32_OperatingSystem).version -like “6*”) {<\/p>\n

$over30dayprofiles = @(Get-ChildItem -force “C:Users” | Where {<\/p>\n

((Get-Date)-$_.lastwritetime).days -ge 30<\/p>\n

} )<\/p>\n

Set-Content “.over30dayprofiles.txt” $over30dayprofiles<\/p>\n

$over30dayprofiles = @(Get-Content “.over30dayprofiles.txt” | Foreach-Object {<\/p>\n

  $_ -replace ‘Administrator’, ” `
   -replace ‘LocalService’, ” `
   -replace ‘NetworkService’, ”<\/p>\n

} | Select-String -pattern “w” | ForEach-Object { $_.line })<\/p>\n

$count = $over30dayprofiles.count<\/p>\n

$i = 0<\/p>\n

Set-Location ‘C:Documents and Settings’<\/p>\n

Do {<\/p>\n

 Remove-Item -force -recurse $over30dayprofiles[$i]<\/p>\n

 $i++<\/p>\n

}<\/p>\n

Until($i -ge $count)\nThe first alteration that we need is to add a message to the user in the event that there are no profiles to remove. To do so, directly after we remove the desired accounts and white space from the variable $over30dayprofiles<\/strong>, we add the following:<\/p>\n

If ($over30dayprofiles.count -eq 0){Write-Host ” all profiles have been accessed in the last 30 days”}<\/p>\n

If ($over30dayprofiles.count -gt 0){\nBecause of the brace that is located at the end of the second IF<\/strong> statement, we need to add a closing brace at the end of the script. This will run the command inside the script only when there are profiles that have not been accessed within the past 30 days.\nDirectly after that, we add the command to determine the SID of each profile that we are going to remove. First we need to define in a variable the number of profiles that we are going to remove:<\/p>\n

$count = $over30dayprofiles.count\nThe Count <\/strong>property simply counts the items in the $over30dayprofiles<\/strong> array. Next we need to state that this is only to be <\/em>run <\/em>in any version of Windows 6 and later. I explained how to do this in another previous post: Weekend Scripter: Use PowerShell for Conditional User Profile Removal<\/a>.<\/p>\n

IF ((Get-WmiObject Win32_OperatingSystem).version -like “6*”) {}\nInside the braces, we are going to use the WMI object Win32_userprofile<\/strong>. To do this, we need to use the Get-WMIobject<\/strong> cmdlet to call Win32_userprofile<\/strong>:<\/p>\n

Get-WMIobject win32_userprofile\nBecause we only want two properties (SID<\/strong> and Path<\/strong>), we are going to filter it by using the pipe operator (|<\/strong>) followed by the Select<\/strong> cmdlet:<\/p>\n

Get-WMIobject win32_userprofile | select\nThe property types are the same for all profiles, so no quotations are needed. We simply need to separate them by a comma and a space:<\/p>\n

Get-WMIobject win32_userprofile | Select SID, Localpath\nWe are going to manipulate this further, so we pipe it into the file named ProfileInfo.txt<\/strong>:<\/p>\n

Get-WMIobject win32_userprofile | Select SID, Localpath | Out-File .ProfileInfo.txt\nThe next portion of the script utilizes a Do-Until<\/strong> loop, so we set a counter at 0<\/strong>:<\/p>\n

$i = 0\nNow let’s create the item that we are going to be manipulating:<\/p>\n

New-Item -path .SID.txt -itemtype File\nAnd finally, we can start the Do-Until<\/strong> loop:<\/p>\n

Do{}<\/p>\n

Until()\nInside the braces that follow the Do<\/strong> statement, we are going to pull the contents of ProfileInfo.txt<\/strong>, select any string that has the currently selected value from the $over30dayprofiles<\/strong> array, and split the line at the first whitespace that occurs. This is done by first retrieving the data, and then selecting the line:<\/p>\n

Get-Content .ProfileInfo.txt | Select-String -pattern $over30dayprofiles[$i] |\nNow we split the line at the first white space by using a regular expression:<\/p>\n

Foreach-Object { $_ -split ’s+’ }\nAnd we select the first half of the string:<\/p>\n

ForEach-Object { $_ -split ‘s+’ | select -f 1}\nIf we append this command to the end of the content and set the output location, this is the result:<\/p>\n

Get-Content .ProfileInfo.txt | Select-String -pattern $over30dayprofiles[$i] | ForEach-Object { $_ -split ‘s+’ | select -f 1} | Add-Content .SID.txt\nNow we nest this into the Do<\/strong> portion of our Do-Until<\/strong> loop, and add the escape value. An escape value is a predetermined number that will end the loop when the counter meets the inequality presented by the Until<\/strong> or While<\/strong> statements.<\/p>\n

Do {<\/p>\n

Get-Content .ProfileInfo.txt | Select-String -pattern $over30dayprofiles[$i] | ForEach-Object { $_ -split ‘s+’ | select -f 1} | Add-Content .SID.txt<\/p>\n

$i++}<\/p>\n

Until($i -ge $count)\nAs you can see, the escape value is $i<\/strong> when our counter reaches a value greater than $count<\/strong>. $count <\/strong>is the number of elements in the $over30daysprofiles<\/strong> array.<\/p>\n

IF ((Get-WmiObject Win32_OperatingSystem).version -like “6*”) {<\/p>\n

Get-WMIobject win32_userprofile | select SID, Localpath | Out-File .ProfileInfo.txt<\/p>\n

$i = 0<\/p>\n

New-Item -path .SID.txt -itemtype File<\/p>\n

DO {<\/p>\n

get-content .ProfileInfo.txt | Select-String -pattern $over30dayprofiles[$i] | ForEach-Object {<\/p>\n

                        $_ -split ‘s+’ | select -f 1<\/p>\n

            } | Add-Content .SID.txt<\/p>\n

$i++<\/p>\n

}<\/p>\n

Until($i -ge $count)<\/p>\n

$SID = @(Get-Content .SID.txt)\nNow we are going to take the contents of the SID.txt file, and set them as the values for another array, $SID<\/strong>:<\/p>\n

$SID = @(Get-Content .SID.txt)\nBecause this script is to be run on any current computer, we need to add the following line so that we are working out of the Documents and Settings folder:<\/p>\n

IF ((Get-WmiObject Win32_OperatingSystem).version -like “5*”) {Set-Location ‘C:Documents and Settings’}\nFor the sake of clarity, the next set of script will be explained in its entirety.\nFirst we set our counter and Do-Until<\/strong> statement:<\/p>\n

$i = 0<\/p>\n

Do {}<\/p>\n

Until()\nNow we add the conditional IF<\/strong> statements:<\/p>\n

$i = 0<\/p>\n

Do {<\/p>\n

            IF(){}<\/p>\n

            IF(){}<\/p>\n

}<\/p>\n

Until()\nNext we add our operating system identifiers by using the WMI object we have already been using:<\/p>\n

$i = 0<\/p>\n

Do {<\/p>\n

            IF((Get-WmiObject Win32_OperatingSystem).version -like “5*”){}<\/p>\n

            IF((Get-WmiObject Win32_OperatingSystem).version -like “6*”){}<\/p>\n

}<\/p>\n

Until()\nHere is where the script changes depending on the operating system. For version 5 operating systems, we need to simply remove the profile folders because they will re-create if the user signs in again. It was suggested that I use the utility Delprof<\/strong> for this, but because there is no way to differentiate between administrator accounts and user accounts, we will go with this:<\/p>\n

$i = 0<\/p>\n

Do {<\/p>\n

            IF((Get-WmiObject Win32_OperatingSystem).version -like “5*”){<\/p>\n

Remove-Item -force -recurse $over30dayprofiles[$i]<\/strong>}
            IF((Get-WmiObject Win32_OperatingSystem).version -like “6*”){}<\/p>\n

}<\/p>\n

Until()\nNow we move on to what actually changed. As expressed in the comments from the previous post, when you delete the profile folder from the Users<\/strong> folder in Windows Vista and later, the operating system will continually generate a temporary profile because the registry key located at:<\/p>\n

“HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionProfileList”\nSo instead of removing the profile folder or doing some truly interesting stuff with the registry, we are going to use the win32_userprofile<\/strong> WMI object, this bit of script is courtesy of the user, JRV. Specifically, we are going to filter it for the SID <\/strong>in the $SID<\/strong> array that corresponds with the counter, and we are going to set this as the value of the $profile<\/strong> variable:<\/p>\n

$profile = Get-WmiObject win32_userprofile -filter “SID=’$($SID[$i])'”\nNow that we have the $profile<\/strong> variable defined with the desired SID<\/strong>, we are going to delete the profile that it refers to. This is done with the Delete() <\/strong>property (this will NOT work without the empty parentheses).<\/p>\n

$profile.delete()\nNow we add these two lines together and nest them in our second IF<\/strong> statement:<\/p>\n

$i = 0<\/p>\n

Do {<\/p>\n

IF((Get-WmiObject Win32_OperatingSystem).version -like “5*”){Remove-Item -force -recurse $over30dayprofiles[$i]}<\/p>\n

IF((Get-WmiObject Win32_OperatingSystem).version -like “6*”){ $profile = Get-WmiObject win32_userprofile -filter “SID=’$($SID[$i])'”<\/strong><\/p>\n

 <\/strong><\/p>\n

$profile.delete()<\/strong>}<\/strong><\/p>\n

}<\/p>\n

Until()\nWe need to add the rest of the script to increment the counter:<\/p>\n

Do {<\/p>\n

IF((Get-WmiObject Win32_OperatingSystem).version -like “5*”){Remove-Item -force -recurse $over30dayprofiles[$i]}<\/p>\n

IF((Get-WmiObject Win32_OperatingSystem).version -like “6*”){ $profile = Get-WmiObject win32_userprofile -filter “SID=’$($SID[$i])'”<\/strong><\/p>\n

 <\/strong><\/p>\n

$profile.delete()<\/strong>}<\/strong><\/p>\n

 $i++<\/p>\n

}<\/p>\n

Until($i -ge $count)\nAnd finally, we need to close the brace that we left open with If “($over30dayprofiles.count -gt 0){“<\/strong> and clean up our temporary files:<\/p>\n

Remove-Item .over30dayprofiles.txt<\/p>\n

Remove-Item .ProfileInfo.txt<\/p>\n

Remove-Item .SID.txt<\/p>\n

}\nFollowing is the complete and working script. Although it will generate errors if there is an issue with the accounts being removed, it will function on all others. These errors are reported, and the script will continue to run to completion. I have used Bold<\/strong> formatting to highlight the sections that have been added. _____________________________________________________________<\/p>\n

Set-Location $homedesktop<\/strong><\/p>\n

New-Item -path .over30dayprofiles.txt -itemtype File<\/strong><\/p>\n

IF ((Get-WmiObject Win32_OperatingSystem).version -like “5*”) {<\/p>\n

$over30dayprofiles = @(Get-ChildItem -force “C:Documents and Settings” | Where {<\/p>\n

((Get-Date)-$_.lastwritetime).days -ge 30<\/p>\n

} )<\/p>\n

}<\/p>\n

IF ((Get-WmiObject Win32_OperatingSystem).version -like “6*”) {<\/p>\n

$over30dayprofiles = @(Get-ChildItem -force “C:Users” | Where {<\/p>\n

((Get-Date)-$_.lastwritetime).days -ge 30<\/p>\n

} )<\/p>\n

}<\/p>\n

Set-Content “.over30dayprofiles.txt” $over30dayprofiles<\/p>\n

 <\/p>\n

$over30dayprofiles = @(Get-Content “.over30dayprofiles.txt” | Foreach-Object {<\/p>\n

 <\/p>\n

  $_ -replace ‘Administrator’, ” `<\/p>\n

  -replace ‘LocalService’, ” `<\/p>\n

  -replace ‘NetworkService’, ”`<\/p>\n

  -replace ‘desktop.ini’, ”`<\/p>\n

  -replace ‘temp’, ”`<\/p>\n

  -replace ‘All Users’, ”`<\/p>\n

  -replace ‘Default’, ”`<\/p>\n

  -replace ‘Default User’, ”`<\/p>\n

  -replace ‘Public’, ”`<\/p>\n

  -replace ‘ User’, ”<\/p>\n

 <\/p>\n

} | Select-String -Pattern “w” | ForEach-Object { $_.line })<\/p>\n

If ($over30dayprofiles.count -eq 0){Write-Host “all profiles have been accessed in the last 30 days”}<\/strong><\/p>\n

If ($over30dayprofiles.count -gt 0){<\/strong><\/p>\n

$count = $over30dayprofiles.count<\/strong><\/p>\n

IF ((Get-WmiObject Win32_OperatingSystem).version -like “6*”) {<\/strong><\/p>\n

get-WMIobject win32_userprofile | select SID, Localpath | Out-File .ProfileInfo.txt<\/strong><\/p>\n

$i = 0<\/strong><\/p>\n

New-Item -path .SID.txt -itemtype File<\/strong><\/p>\n

DO {<\/strong><\/p>\n

Get-Content .ProfileInfo.txt | Select-String -pattern $over30dayprofiles[$i] | ForEach-Object { <\/strong><\/p>\n

                        $_ -split ‘s+’ | select -f 1<\/strong><\/p>\n

            } | Add-Content .SID.txt<\/strong><\/p>\n

$i++<\/strong><\/p>\n

}<\/strong><\/p>\n

 <\/strong><\/p>\n

Until($i -ge $count)<\/strong><\/p>\n

$SID = @(Get-Content .SID.txt)}<\/strong><\/p>\n

IF ((Get-WmiObject Win32_OperatingSystem).version -like “5*”) {Set-Location ‘C:Documents and Settings’}<\/p>\n

 <\/p>\n

$i = 0<\/p>\n

Do {<\/p>\n

  IF((Get-WmiObject Win32_OperatingSystem).version -like “5*”){<\/p>\n

   Remove-Item -force -recurse $over30dayprofiles[$i]<\/p>\n

  }<\/p>\n

 <\/p>\n

  IF((Get-WmiObject Win32_OperatingSystem).version -like “6*”) {<\/p>\n

   $profile = Get-WmiObject win32_userprofile -filter “SID=’$($SID[$i])'”<\/strong><\/p>\n

   $profile.Delete()<\/strong><\/p>\n

  }<\/p>\n

 $i++<\/p>\n

}<\/p>\n

Until($i -ge $count)<\/p>\n

 <\/p>\n

Remove-Item .over30dayprofiles.txt<\/strong><\/p>\n

Remove-Item .ProfileInfo.txt<\/strong><\/p>\n

Remove-Item .SID.txt<\/strong><\/p>\n

}<\/strong>\nThe complete script is uploaded to the Script Center Repository: Over 30 Day Removal<\/a>. Please download it from there, rather than attempting to copy from this web page. As with my previous posts, I welcome all critiques. It is my firm belief that anything can be improved by the collective <\/strong>knowledge of the community.\n~Bob\nThank you, Bob, for your time and efforts in writing this blog to share with our readers.\nI invite you to follow me on Twitter<\/a> and Facebook<\/a>. If you have any questions, send email to me at scripter@microsoft.com<\/a>, or post your questions on the Official Scripting Guys Forum<\/a>. See you tomorrow. Until then, peace.\nEd Wilson, Microsoft Scripting Guy<\/strong> <\/p>\n","protected":false},"excerpt":{"rendered":"

Summary: Guest blogger, Bob Stevens, revises his script for conditional user profile removal. Microsoft Scripting Guy, Ed Wilson, is here. I am happy to welcome back guest blogger, Bob Stevens. Take it away Bob… Previously I released a blog post entitled Weekend Scripter: Use PowerShell for Conditional User Profile Removal. If you have not read […]<\/p>\n","protected":false},"author":596,"featured_media":87096,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[424,16,340,56,3,45],"class_list":["post-2861","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scripting","tag-bob-stevens","tag-desktop-management","tag-general-mgmt-tasks","tag-guest-blogger","tag-scripting-guy","tag-windows-powershell"],"acf":[],"blog_post_summary":"

Summary: Guest blogger, Bob Stevens, revises his script for conditional user profile removal. Microsoft Scripting Guy, Ed Wilson, is here. I am happy to welcome back guest blogger, Bob Stevens. Take it away Bob… Previously I released a blog post entitled Weekend Scripter: Use PowerShell for Conditional User Profile Removal. If you have not read […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/2861","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/users\/596"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/comments?post=2861"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/2861\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media\/87096"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media?parent=2861"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/categories?post=2861"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/tags?post=2861"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}