Hello Wayne, :)
Yep, everything is still the same in the W10 CU.
It would be best that you are signed in to an administrator account to delete her account from.
In addition, be sure to back up anything she doesn't want to lose in her personal folders before deleting the account.
Hi Shawn @Brink :)
I was checking User account deletion, to delete some test accounts I had created.
I totally agree with your post that the best way to delete users is with Option 1, which is the most suitable to delete both the account and profile.
The problem is that following deletion there are a lot of remnants in the registry per user account, which accumulate with every deleted account.
I made a thorough check and I have narrowed down these registry leftovers, which can be safely deleted, using a "reg delete" command.
Where: S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-100X the SID of the user you have deleted, taken, before deletion from the command "wmic useraccount get name, SID".Code:1. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\ARP 2. HKLM\SOFTWARE\Microsoft\UserManager\Users 3. HKLM\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\features\S-1-5-21-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxxx-100x 4. HKLM\SOFTWARE\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites\{S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-100X} 5. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{D6886603-9D2F-4EB2-B667-1971041FA96B}\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-100X 6. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SystemProtectedUserData\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-100X 7. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\TouchKeyboard\Users\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-100X 8. HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows Search\Gather\Windows\SystemIndex\Sites\{S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-100X} 9. HKLM\SYSTEM\CurrentControlSet\Services\bam\UserSettings\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-100X 10. HKU\.DEFAULT\Software\Microsoft\IdentityCRL\DeviceIdentities\production\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-100X 11. HKU\S-1-5-18\Software\Microsoft\IdentityCRL\DeviceIdentities\production\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-100X 12. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\UserTile 13. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\NetCache\PurgeAtNextLogoff
Additionally to the above registry keys there are:
more than 30 values under
and more than 135 values underCode:HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules
which most probably are system specific (needs to be checked in different systems), as they are SID's (i.e. like the following)Code:HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\AppIso\FirewallRules
I do have the complete list of these values (if they're not system specific) and I can send them, in case you need them.Code:reg DELETE HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules /v {4FB1BC66-F234-49AA-802F-9DAD2A6D7859} reg DELETE HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\AppIso\FirewallRules /v {4AE04CC8-8C3D-4803-BD38-FA08E4A65D22}
Do you think it's worth examining it, so, after every user deletion the registry is also cleaned up?
Hello Dimitri @ddelo, :)
It would be nice if every bit of an account would be deleted when the account was deleted.
I'm not sure it would be worth examining too deeply though. None of the registry leftovers should hurt anything since it was for an account that no longer exists. Not to mention the risk of mistakenly deleting a registry key that could cause an issue.
Quote