While I was working on a side project I found the need to have some kind of logging while using my Spoof User Profile program. I did some code editing and now the new version of the Spoof User Profile program uses logging when switching the state key(s).

The path of logging is made configurable, in two ways:

  1. By using a environment variable SPOOF:
  2. By using a parameter /LOC=<path to logging>

The /LOC takes precedence over the evironment variable.

You can download the program from the Download Section. Download the program there and leave me a comment with your ideas about the program!

Write comment (0 Comments)

I was aiding a co-worker with some profile management stuff in a PoC he was doing on Windows 10 and Server 2016. Pointed him out to Workplace and Profiles. He got going with it implemented everything and came back to me with the remark that everything works, but they have a second state key in the registry that has a backup tack between brackets (see picture)

As you can see there is a State [Backup] entry existant in the registry, this also needs to be set to the correct value.

So I added some code to my executable, which is now downloadable in the download section

Write comment (1 Comment)

In the previous post about the workplace and profiles (Workplace and Profiles) I spoke about the spoof profile executable I created. After that post I received a few questions about what the executable does. This post is to explain the working of the executable.

First of all, the program determines the SID of the user. The SID then is used to find the corresponding registry hive under: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList it will then change the value of state to 644 which will trigger the User Profile Service to delete the profile when  the users logs off.

This way you can use local profiles instead of a mandatory profile which will save you in:

  • Time creating a mandatory profile
  • Update your mandatory profile after windows updates (because basically what is trapped in the mandatory profile won't be targeted at windows update)
  • Advanced configurations (it will work out of the box)


Write comment (0 Comments)

Workplace and profiles

Working with Citrix XenApp, Microsoft Remote Desktop Services, or other types of workplace can be challenging when it comes to managing profiles. Most of the times mandatory profiles are used in these types of environments, but every time a user logs off their settings are flushed. Users are keen on there settings so there comes user profile visualization in to play. Tools that can virtualize user settings are Microsoft UEV, Appsense, VMWare UEM and RES Workspace Manager.

Since I like to work with local profiles instead of mandatory profiles (the fact that I don't have to update my profile after several Windows updates) I have to make sure that profiles are deleted after a user logs off. To do so, we have to trick Windows into believing the local profile is a guest or temporary profile.

In the past I always used a Powershell script to trick windows to believe the profile is a guest or temporary profile. Since Powershell isn't that quick I have created an executable made in C# which does it's work quicker. This article describes how to use the executable in RES Workspace manager. But I will also give some pointers on how to use the executable with other means.

Add to Workspace Manager

Download the attached zip file. Extract it and add the executable to the custom resources in RES Workspace Manager. You can place the executable in the root or in a separate folder of the custom resources.

Now the executable will be pushed to all the agents. It's time to create a logoff task. Head to Composition>Actions by Event > At Logoff

Right click in the actions tab and click New.

Configure the task as shown in this picture:





Now the logoff task is in place, we have to configure a GPO with the following settings:



Now that the GPO is created link it to the correct OU's and test out your local profiles in combination with RES WM. Look on the target machine to see if the profile get's deleted.

Using other types of management

When not using RES Workspace Manager as profile management tool. You still are able to use the executable. Only thing is that a user doesn't have the rights to edit the registry. That's why I recommend making a Group Policy (Machine\Policies\Windows Settings\Security Settings\Registry) to enable domain users to edit MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList. That way when the user logs off the profile state gets set to the correct value and the profile will be deleted.

Please leave a comment if you have something to say about this article, or if you want to say thanks or discuss.

Write comment (0 Comments)

At a customer we are using App-V 5.0 and RES Workspace Manager on XenApp 7.6 with Windows Server 2012 R2. For App-V the full infrastructure is in use. We wanted to make it possible for users to do an publishing refresh App-V applications without having them enter powershell commands or having them to logoff and logon. After the publishing refresh the script will initiate a workspace refresh.

I created an application with the following Settings:

Application: Refresh App-V Applications
Command line: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Working directory: C:\Windows\System32\WindowsPowerShell\v1.0\
Parameter: "C:\PROGRA~2\RESSOF~1\WORKSP~1\Data\DBCache\Resources\custom_resources\Scripts\RefreshAppV.ps1"

The content of the ps1 file is the following:

import-module appvclient
Sync-AppvPublishingServer -ServerId 1
& "C:\Program Files (x86)\RES Software\Workspace Manager\pwrgate.exe" -2


The PS1 is placed in the custom resources in a folder called Scripts. Now when a user clicks the application, first there will be a sync between the client and the publishing server, after that process has completed a workspace refresh will be initiated.

Write comment (0 Comments)
feed-image RSS