Windows user profile is cretaed on all scanned machines
Guys
As nework admin I'm using my creds to scan machines. It appears that Windows is creating a Windows user profile for me on every machine scanned.
1) Is this necessary?
2) If yes, why does the scan need to create a profile?
3) Can this be prevented?
4) What are best practices if this can't be prevented. A service account - be that network or local admin?
Thanks!
0
Comments
See Wei's reply here:
https://help.pdq.com/hc/en-us/community/posts/360050593091-Is-it-necessary-to-create-a-profile-in-windows-to-perform-tasks-
He is correct.
So a profile will be created by any account you use, but which account that is up to you and how you configure things.
I'm using a separate service account for my scans + deployments. No profiles created on target machines for me!
I also have an "admin" account which is lit up with all of the big stuff (domain admin) and use my regular account for day-to-day stuff like email and web browsing.