Local Account corruption

Question

I am starting to see a couple of issues with my Windows 7 Pro systems that I am not sure if ZCM's DLU policy might be causing issues with.
I worked on a students computer yesterday where the Novell Login worked as designed but the local log reported the Local profile was corrupt and kills the login. Deleting the local username and renaming the profile folder for that student seems to fix the issue. Could the DLU policy be causing problems with the Local account?
The second item I am seeing more and more of is that the Windows 7 Pro Startup repair seems to be occurring more frequently most recently. The process is random for student computers so I have attributed the issue to the student forcing a shutdown instead of shutting down the computer correctly. At this point I am not so sure. I have a larger number of repairs that cannot be resolved and the laptop needing a complete reinstall.
Any ideas on either of these issues?
Thanks
Richard

Answer 1

We have been having trouble for some time with Local non-roaming Volatile DLU accounts not completely being deleted at shutdown/reboot. When the account is incompletely deleted, the next time that user logs in, it will often cause errors, such as using the "default profile" or "temporary profile" for that user only. Sometimes a single user will have dozens of local profiles on one machine due to this problem, not counting dozens of other local user profiles which should have all been deleted.
I've written a batch file that deletes the left behind remnants of user accounts, at least allowing you to have a clean machine, while resolving the Default and Temporary profile problem. It can be automated to run silently with a simple bundle every time a user logs in. I'm sure there are a million ways to improve it, but this is what I have so far. Also, it's obviously a band-aid solution, not a real fix. It hasn't caused any problems I am aware of to date, and we have been using it in production for a year now.
Please read the comments in the batch before running.
There is also an Administrator Settings area you can update for your own needs.
@ECHO OFF
REM V2.6
SETLOCAL
TITLE Local Profile and User Account cleanup tool
REM ****************FOR USE ON WINDOWS 7 ONLY!****************
REM Not tested on any other version of Windows. May work with
REM Vista and Windows 8.....?
REM If your Local Profiles folder is not the default C:\Users
REM be sure to correct all instances found in this script.
REM (or convert it to a variable if you are really ambitious!)
REM ### WARNING ### WARNING ### WARNING ### WARNING ###
REM DO NOT run this batch script on a computer that has a
REM NON-VOLATILE user account on it. IT WILL DELETE all data
REM in every user's profile on the C: drive!!!!!
REM This script is provided as-is, no warranties etc. etc.
REM It's up to you to perform the proper testing to ensure
REM it doesn't blow up your system, delete your stuff, get you
REM fired, or cause accidental nukular devastation.
REM This script cleans up the 3 major components of all local user
REM accounts. It does not attempt to do a complete registry
REM cleanup, and also has no provision for logging failures
REM aside from displaying them on the screen them as they happen.
REM Because no child should go without a Nukular Bomb to play with. - G. W. Bush
REM OK, I made that bit up.
REM ---------------ADMINISTRATOR SETTINGS BEGIN------------------------
REM Set this variable to 1 to disable user prompting for automation purposes
SET NPSKIP=0
REM *******Set all the users/profiles you DO NOT want erased here (case INSENSITIVE!!):**********
REM %USERNAME% is the currently logged in user. DO NOT REMOVE this entry, or face severe wrath!
SET KEEP="Administrator,All Users,UpdatusUser,Default,Default User,Public,Guest,%USERNAME%"
REM ---------------ADMINISTRATOR SETTINGS END--------------------------
ECHO.
ECHO.
ECHO ---WARNING!!!---
ECHO.
ECHO This script is for VOLATILE DLU computers ONLY!
ECHO It will delete all local users and their files!
ECHO.
IF "%NPSKIP%" == "1" GOTO NP1
choice /M "Are you sure you want to run this script?"
IF ERRORLEVEL=2 EXIT /B
:NP1
REM Inserts a delay on silent run to allow system to finish login tasks.
IF "%NPSKIP%" == "1" TIMEOUT /T 180
REM Enumerates Local user accounts
FOR /F "skip=1 delims=" %%c IN ('wmic useraccount get name') DO CALL :FUCHECK "%%c"
REM Enumerates Local Profiles folder for orphaned profiles
REM NOTE: This deletes ALL subfolders listed under C:\Users
REM even if they are not a user's profile.
REM (EXCEPT folders listed in the profile exceptions above!)
FOR /f "delims=" %%b IN ('dir /b C:\Users') DO CALL :ORPHAN "%%b"
REM Enumerates Registry Hive Profile List
FOR /f "delims=" %%d IN ('reg query "hklm\software\microsoft\windows nt\currentversion\profilelist" /f "S-1-5-21" /k') DO CALL :HIVE "%%d"
GOTO END
:FUCHECK
SET F1=%1
IF %F1% == "" GOTO :EOF
REM Removes quotation marks from variable
SET F1=###%F1%###
SET F1=%F1:"###=%
SET F1=%F1:###"=%
SET F1=%F1:###=%
REM Removes trailing spaces from variable
set "a=%F1%"
:loop
set /a n+=1
for /f "tokens=%n%" %%i in ("%a%") do if not "%%i"=="" set b=%b%%%i && goto:loop
set a=%b:~0,-1%
set b=
SET F1=%a%
set a=
set n=
set i=
ECHO Found user account: %F1%
IF /I "%USERNAME%" == "%F1%" GOTO :EOF
ECHO %KEEP%|find /I "%F1%" > NUL
IF ERRORLEVEL=1 GOTO CLEAN1
IF ERRORLEVEL=0 GOTO :EOF
GOTO :EOF
:CLEAN1
ECHO User profile will now be orphaned and deleted later.
ECHO Deleting User Account for %F1%
net user "%F1%" /del
GOTO :EOF
:ORPHAN
SET F2=%1
REM Removes quotation marks from variable
SET F2=###%F2%###
SET F2=%F2:"###=%
SET F2=%F2:###"=%
SET F2=%F2:###=%
ECHO Found user profile: %F2%
IF /I "%USERPROFILE%" == "C:\Users\%F2%" GOTO :EOF
ECHO %KEEP%|find /I "%F2%" > NUL
IF ERRORLEVEL=1 GOTO CLEAN2
IF ERRORLEVEL=0 GOTO :EOF
REM NOTE that if you are logged in as a user, the script will NOT delete ANY of your
REM User profiles, even ones that are orphaned. Since they are YOUR files, it does
REM not matter. The profiles will be deleted as soon as a different user runs the script.
GOTO :EOF
:CLEAN2
ECHO Deleting User Profile for %F2%
rmdir "C:\Users\%F2%" /s /q
IF NOT EXIST "C:\Users\%F2%" GOTO :EOF
ECHO User Profile erase failed. Retrying after 5 seconds...
REM Using PING LOCALHOST for 5 second delay.
ping 127.0.0.1 -n 6 > NUL
rmdir "C:\Users\%F2%" /s /q
IF NOT EXIST "C:\Users\%F2%" GOTO :EOF
ECHO User Profile erase failed. Retrying after 10 seconds...
ping 127.0.0.1 -n 11 > NUL
rmdir "C:\Users\%F2%" /s /q
IF NOT EXIST "C:\Users\%F2%" GOTO :EOF
ECHO.
ECHO User Profile erase failed. Skipping.
ECHO NOTE: Profile may have been paritally erased and nonfunctional/broken.
ECHO.
ECHO This is usually caused by a program that is currently running that
ECHO has locked a file in the user's profile. Try rebooting and/or ending
ECHO the offending task or stopping the offending service.
GOTO :EOF
:HIVE
SET F3=%1
REM Removes quotation marks from variable
SET F3=###%F3%###
SET F3=%F3:"###=%
SET F3=%F3:###"=%
SET F3=%F3:###=%
REM Grabs first 3 characters and checks to see if it's the last entry, which is an invalid comment output.
IF "%F3:~0,3%" == "End" GOTO :EOF
FOR /F "tokens=3" %%e IN ('reg query "%F3%" /v ProfileImagePath') DO SET REGPATH=%%e
IF "%REGPATH%" == "" (ECHO Found broken registry key. && GOTO REGDELETE "%F3%")
SET REGPATH=%REGPATH:C:\Users\=%
SET "REGPATH=%REGPATH:.="&rem %
ECHO Found user hive entry: %REGPATH%
ECHO %KEEP%|find /I "%REGPATH%" > NUL
IF ERRORLEVEL=1 CALL :REGDELETE "%F3%"
SET REGPATH=
IF ERRORLEVEL=0 GOTO :EOF
SET REGPATH=
GOTO :EOF
:REGDELETE
SET REGPATH=
ECHO Deleting %1
REG DELETE %1 /f
ECHO.
GOTO :EOF
:END
SET F1=
SET F2=
SET F3=
SET KEEP=
SET REGPATH=
ECHO.
ECHO.
ECHO Please REBOOT and log on as a different user and run this
ECHO script again to ensure that all accounts get cleaned up.
ECHO (The idea is to run it twice as two different users.)
ECHO.
IF "%NPSKIP%" == "1" GOTO NP2
PAUSE
:NP2
SET NPSKIP=
ENDLOCAL
REM Brought to you by the number Q, Google, and Me