Can't delete user profile in windows 2k3 using scripting drv


Hi,

I can delete users from scripting driver using delete.vbs. But Failed to
delete user profile in windows 2003 (Non AD) server. User profiles are
present in C:\documents and settings folder with user login name.

I have noticed that delete.vbs script is running as local SYSTEM account
of windows 2003 to delete profile folder and showing permission deny
error to delete user profile folder. I have noticed that SYSTEM account
is having full permission in user profile folder too. But still can't
delete it.

As per requirement, new user will be provision on that server for few
days i.e. 2 or 3 days. So Expecting that there will be lots of pending
user profile along with existing local user profile. I was tested
delpro.exe of MS but can't run because its cleaning up all user profile.
So I can't accept it. Also Other then MS or Netiq tool we can't run in
that windows server. In addition WMI class i.e. win32_userprofile does
not exist in windows 2003.

I have also noticed that delete.vbs called twise during user delete
operation. Not sure why?

I am not getting any solution to remove user profile in windows 2003. Is
any one can help me on this issue?


Thanks and Regards

Deb


--
deb_sarkar
------------------------------------------------------------------------
deb_sarkar's Profile: https://forums.netiq.com/member.php?userid=7951
View this thread: https://forums.netiq.com/showthread.php?t=51681

Parents
  • deb sarkar <deb_sarkar@no-mx.forums.netiq.com> wrote:
    > Hi,
    >
    > I can delete users from scripting driver using delete.vbs. But Failed to
    > delete user profile in windows 2003 (Non AD) server. User profiles are
    > present in C:\documents and settings folder with user login name.
    >
    > I have noticed that delete.vbs script is running as local SYSTEM account
    > of windows 2003 to delete profile folder and showing permission deny
    > error to delete user profile folder. I have noticed that SYSTEM account
    > is having full permission in user profile folder too. But still can't
    > delete it.


    Two causes come to mind

    1. ACL/ACE issues. I usually run setacl.exe twice over the entire profile
    once to "take ownership" and then the second time to set inherited rights
    to full control for local system.

    2. Unable to unload cleanly user profiles on logoff, leaving profiles
    unable to be deleted.

    I usually work around this with a delay on deletion (1 days) or that the
    servers in question are rebooted regularly (especially terminal server
    /Citrix)

    The author setacl also has a tool called delprof2 that may help as it
    bypasses the normal security to avoid the ownership issues mentioned above.
    I've not personally used it though.

    > I have also noticed that delete.vbs called twise during user delete
    > operation. Not sure why?
    >
    > I am not getting any solution to remove user profile in windows 2003. Is
    > any one can help me on this issue?




    --
    If you find this post helpful and are logged into the web interface, show
    your appreciation and click on the star below...
Reply
  • deb sarkar <deb_sarkar@no-mx.forums.netiq.com> wrote:
    > Hi,
    >
    > I can delete users from scripting driver using delete.vbs. But Failed to
    > delete user profile in windows 2003 (Non AD) server. User profiles are
    > present in C:\documents and settings folder with user login name.
    >
    > I have noticed that delete.vbs script is running as local SYSTEM account
    > of windows 2003 to delete profile folder and showing permission deny
    > error to delete user profile folder. I have noticed that SYSTEM account
    > is having full permission in user profile folder too. But still can't
    > delete it.


    Two causes come to mind

    1. ACL/ACE issues. I usually run setacl.exe twice over the entire profile
    once to "take ownership" and then the second time to set inherited rights
    to full control for local system.

    2. Unable to unload cleanly user profiles on logoff, leaving profiles
    unable to be deleted.

    I usually work around this with a delay on deletion (1 days) or that the
    servers in question are rebooted regularly (especially terminal server
    /Citrix)

    The author setacl also has a tool called delprof2 that may help as it
    bypasses the normal security to avoid the ownership issues mentioned above.
    I've not personally used it though.

    > I have also noticed that delete.vbs called twise during user delete
    > operation. Not sure why?
    >
    > I am not getting any solution to remove user profile in windows 2003. Is
    > any one can help me on this issue?




    --
    If you find this post helpful and are logged into the web interface, show
    your appreciation and click on the star below...
Children