Important Notice: On February 29th, this community was put into read-only mode. All existing posts will remain but customers are unable to add new posts or comment on existing. Please feel to join our Community Discord for any questions and discussions.

Inventory all Users Profiles in registry with .bak extension and cleanup ?

Sam Wang

April 29, 2022 23:58

Hello,

Is there a way for PDQ to find all machines that have registry with user profile as .bak ?

I have few machines that have .bak user profile due to some issue for roaming profile on a file server and have caused few user profile corruption across the machines on the network. Is there a way for PDQ to list machines that have the profile list named as .bak in ?

HKLM:\Software\Microsoft\Windows NT\CurrentVersion\ProfileList

Once IT review the list , another script to action and delete the .bak profile ?

Thank you

Sam

Comments

1 comment

Luke Nichols
May 03, 2022 14:21
Sam,

Yes, this should be possible using a custom scan profile and a report or a dynamic collection.
- In PDQ Inventory click on Computer > Scan Profiles
- Either create a new profile or modify an existing one. If you want this scan to run quite frequently you could attach it to e.g. the Applications scan profile, if you want it to run rarely you can create a new profile and set a less frequent scan schedule on it.
- In the new profile or the existing profile, add a new registry scanner. If you already have an HKLM registry scanner in that profile you can just add a pattern to that scanner instead.
- For the Hive set it to HKEY_LOCAL_MACHINE
- Include Pattern(s):
  Software\Microsoft\Windows NT\CurrentVersion\ProfileList\*.bak
- Now any computers scanned with this scan profile should find any profiles starting with .bak
  You can construct a report, auto report, dynamic collection, etc. as desired to find and report on these computers.
1