Windows IT Pro is the authoritative and independent resource for windows nt, windows 2000, windows 2003, windows xp. Features a collection of resources and magazines for windows IT professionals.
  
  
  Advanced Search 


November 21, 2005

How can I update all profiles on a machine even if they're not currently loaded?

RSS
Subscribe to Windows IT Pro | See More Active Directory (AD) Articles Here | Reprints | Or get the Monthly Online Pass—only $5.95 a month!

A. In the FAQ "How can I update a registry value for all users on a machine?" at http://www.windowsitpro.com/Article/ArticleID/48128/48128.html , I explain how to enumerate HKEY_USERS and update each profile with a registry change; however, that change works only for profiles that are loaded. For example, if I have 100 profiles stored on a machine, they're not all loaded all the time under HKEY_USERS. Therefore, my original code would have updated only currently logged-on users or profiles that had processes still running under them or the well-known built-in credentials (NT System, Local Service, and Network Service) that are always loaded. You should test this code to ensure that it behaves as expected, especially if you run it when a user might log on because it could cause a new profile to be created for the user. I typically use this method as part of an OS upgrade scenario when I want to set something initially or outside of Group Policy for the existing profiles on a machine before user logon is possible.

I've created a script that takes a different approach to updating profiles. The code, which you can download at http://www.windowsitpro.com/articles/download/updateprof.zip enumerates the "Documents and Settings" folder and, for each subfolder (a profile), mounts the ntuser.dat file, modifies the file, unloads it, then moves to the next subfolder. The code also changes the desktop wallpaper, but you can obviously change the actual "work" that the script performs.


Dim objFSO, oShell, strBasePath, objFolder, objSubFolders, objSubFolder, strRun, nRtn
Dim strKeyPath, strKeyPathUser
const HKEY_USERS = &H80000003

Set objFSO = CreateObject("Scripting.FileSystemObject")

strKeyPath = "\Control Panel\PowerCfg\GlobalPowerPolicy" 

Set oShell = WScript.CreateObject("WScript.Shell") 
strBasePath = oShell.ExpandEnvironmentStrings("%ALLUSERSPROFILE%") 
strBasePath = left(strBasePath,InStrRev(strBasePath,"\")-1)
wscript.echo strBasePath

Dim binValue() 
strComputer = "." 

Set objReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & strComputer & "\root\default:StdRegProv") 


Set objFolder = objFSO.GetFolder(strBasePath)
Set objSubFolders = objFolder.SubFolders
For Each objSubFolder in objSubFolders
    Wscript.Echo objSubFolder.Name
    If objFso.FileExists(strBasePath & "\" & objSubFolder.Name & "\" & "ntuser.dat") = True Then
        strRun = "REG.EXE load " & "HKU\TempHive " & Chr(34) & strBasePath & "\" & objSubFolder.Name & "\" & "ntuser.dat" & Chr(34)
        nRtn = oShell.Run(strRun, 1, True) 

        ' The work portion. Change this to anything task you want to perform.
        if objReg.GetBinaryValue(HKEY_USERS, "TempHive" & strKeyPath, "Policies", binValue) = 0 then 
            objReg.GetStringValue HKEY_USERS, "TempHive\Software\Microsoft\Windows\CurrentVersion\Explorer", "Logon User Name", userName 
            Wscript.Echo "Updating username " & userName 
            binValue(51)=128 
            objReg.SetBinaryValue HKEY_USERS, "TempHive" & strKeyPath, "Policies", binValue 
            objReg.SetStringValue HKEY_USERS, "TempHive\Control Panel\Desktop" , "Wallpaper", "D:\Multimedia\Images\Space\rocks.bmp"
            objReg.SetStringValue HKEY_USERS, "TempHive\Control Panel\Desktop" , "WallpaperStyle", "2"
        end if 
        ' End of the work portion

        strRun = "REG.EXE unload HKU\TempHive"
        nRtn = oShell.Run(strRun, 1, True) 
    End If
Next
You should run the script under the system context so that it has write access to everyone's profile (e.g., run it as a scheduled job). Also, instead of enumerating "Documents and Settings," you can enumerate HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList and read the list of profiles.

Thanks to Toby Ovod-Everett for pointing out the limitation in my previous FAQ.

End of Article



Reader Comments

You must log on before posting a comment.

If you don't have a username & password, please register now.




Top Viewed ArticlesView all articles
Friday at PASS Europe 2006

Kevin talks about the closing day of the event and shares a funny Microsoft film. ...

PsExec

This freeware utility lets you execute processes on a remote system and redirect output to the local system. ...

More fun TechEd 2005 Resources

Kevin points out some more TechEd resources ...


Active Directory (AD) Whitepapers Sustainable Compliance: How to reconnect compliance, security and business goals

User Provisioning and Access Control

Managing Unix/Linux with Microsoft System Center Operations Manager 2007 Cross Platform Extensions Beta

Related Events Check out our list of Free Email Newsletters!

Active Directory (AD) eBooks Keeping Your Business Safe from Attack: Monitoring and Managing Your Network Security

Keeping Your Business Safe from Attack: Encryption and Certificate Services

Windows 2003: Active Directory Administration Essentials

Related Active Directory (AD) Resources Become a VIP member of the Windows IT Pro community!
Get it all with the VIP CD and VIP access. A $500+ value for only $279!

Subscribe to Windows IT Pro!
Solve your toughest technical problems with our experts and access 10,000 + articles online. 30% off

Monthly Online Pass - Only $5.95!
Get instant access to 10,000+ articles from Windows IT Pro Magazine!

TechNet Virtual Labs
Evaluate and test Microsoft's newest products.

Job Openings in IT


ADS BY GOOGLE SPONSORED LINKS FEATURED LINKS

Microsoft Exchange & Windows Connections event returns to Las Vegas Nov 10 - 13
Connections returns to Las Vegas for this exciting event where each attendee will receive SQL Server 2008 standard with 1 CAL. Co-located with Microsoft ASP.NET, SQL Server, and SharePoint Connections with over 250 in-depth sessions.

Free Online Event! Virtualization:Get the Facts!
Register now and attend this free, live in-depth online conference on November 13 and 20, 2008, produced by Windows IT Pro. All registrants are eligible to receive a complimentary one-year digital subscription to Windows IT Pro (a $49.95 value)!

Check Out Hyper-V Video on ITTV
Watch Karen Forster's interview on Hyper-V's performance on ITTV.net.

Ease Your Scripting Pains with the Flexibility of PowerShell!
Join MVP Paul Robichaux on December 11, 2008 at 11:00 AM EDT as he equips you with PowerShell basics in 3 introductory lessons, each followed by a live Q&A session—all on your own computer!

Latest Advancements in SSL Technology
There are a variety of different kinds of SSL to explore to ensure customer data is kept confidential and secure. In this paper, we will discuss some of these SSL advances to help you decide which would be best for your organization.

PASS Community Summit 2008 in Seattle on Nov 18-21
The don’t-miss event for Microsoft SQL Server Professionals. Register now and you’ll enjoy top-notch Microsoft and Community speakers and more.



Speed Up Your PC!
Try Diskeeper 2008 with InvisiTasking Free Now!

Get Protected -- Data Protection Manager 2007
Protect your virtualized environment with Data Protection Manager

Agent-less Remote Backup Service, Free 30 Day Trial
Award winning remote backup service at a competitive price with no min GB/month. Sign up Now!

ScriptLogic Cartoon Caption Contest
Submit your caption and you will be entered to win $198.42

Order Your SQL Fundamentals CD Today!
Learn how to use SQL Server, understand Office integration techniques and dive into the essentials of SQL Express and Visual Basic with this free SQL Fundamentals CD.

Maximize Your SharePoint Investment: Get Your Data Moving
Watch this web seminar now to learn how to maximize your SharePoint investment! Join us as we take a look at the complex business of securing, accessing and managing vast amounts of information in a global network and various ways to get your data moving.

List Your Products in Our Technology Resource Directory
Don't miss the chance to post your free listing in this comprehensive directory for IT and developer professionals, powered by Windows IT Pro. But hurry! Deadline ends Oct. 9.
Windows IT Pro Home Register FAQ for Windows WinInfo News
Europe Edition About Us Contact Us/Customer Service Media Kit Affiliates / Licensing  
SQL Server Magazine Office & SharePoint Pro Windows Dev Pro IT Job Hound ITTV
IT Library Technology Resource Directory Connected Home Windows Excavator Windows SuperSite 
 
 Windows IT Pro is a Division of Penton Media Inc.
 Copyright © 2008 Penton Media, Inc., All rights reserved. Terms and Use | Privacy Statement | Reprints and Licensing