Bug with profile picture on AVD / Windows 11 Multi-User
My organization has seen multiple occurrences where a different user's profile picture/icon is shown besides their own. This has been seen in the OS under Start (lower left corner) as well as in Settings -> Accounts. No issues have been seen with Teams or Outlook only the profile picture shown within the OS. Have not seen anything similar with our on-premise Citrix machines. Not a high priority issue obviously but would like to raise awareness. If anyone has ideas, please let me know what information I can gather to start troubleshooting! Thank you.
UserProfile Management with PowerShell
We have an issue where quarterly Nessus scans enumerate vulnerability findings for every user profile on an endpoint. This started me on a path to remove obsolete user profiles to reduce the noise from Nessus. I need to accomplish three things in my final script: 1. set the execution policy to bypass; 2. reset the NTUser.dat to the last write time (if this is not done, the third criteria will not return any hits); 3. find all user profiles older than 60 days and delete them. I did try the GPO to delete profiles older than a certain number of days, but it never removes all of them. I pieced together a script from a couple diff sources and came up with the below. My PowerShell-fu is not that advanced so I am looking for suggestions to make it more efficient. The script works, but I noticed that empty user profile folders at C:\Users\ were left behind. Please advise. Is this a candidate to be made into a function? $ErrorActionPreference = "SilentlyContinue" $Report = $Null $Path = "C:\Users" $UserFolders = $Path | GCI -Directory $currentDate = Get-Date $ageLimit = 60 $userProfiles = Get-ChildItem -Path $Path Set-ExecutionPolicy Bypass -Force ForEach ($UserFolder in $UserFolders) { $UserName = $UserFolder.Name If (Test-Path "$Path\$UserName\NTUSer.dat") { $Dat = Get-Item "$Path\$UserName\NTUSer.dat" -force $DatTime = $Dat.LastWriteTime If ($UserFolder.Name -ne "default") { $Dat.LastWriteTime = $UserFolder.LastWriteTime } } } ForEach ($profile in $userProfiles) { $lastWriteTime = $profile.LastWriteTime $profileAge = ($currentDate - $lastWriteTime).Days If ($profileAge -ge $ageLimit) { Remove-Item -Path $profile.FullName -Recurse -Force } }
User Profile Deletion
Hi, I just wanted to pick anyone's brains, in case they have also encountered this or would have any idea why this is the case. I am fairly new to Intune and script writing, to clarify. Basically, we have been working on a Detect and Remediation script that is deployed via Intune (Devices >Ssni Script and Remediations) to Windows 10 (Ent 22H2) and Windows 11 (Ent 24H2) devices. On any fresh enrolled devices, it detects and deletes user profiles completely fine, but fails to even detect profiles on devices that were enrolled a while ago. However, if we run an Autopilot reset on those devices, the script works again. What difference would a freshly built/enrolled device have to an older one, when they also run other scripts fine. The script targets profiles that are older than 1 hour as we want to keep on top of removing profiles consistently to keep disk space low, especially on lower spec laptops. It will exclude SYSTEM profiles and also any *Admin* user folders - as that has a separate script to only delete LAPSAdmin on an evening, when the workplace is closed (8pm UK). This LAPSAdmin script worked fine on the older enrolled devices. Some of the profiles on the machines go back to 2023, is the '1 hour' target not effective against that old of a profile - has it become stale?SS Like I said, I am fairly new to this and have used bits and pieces from different locations to help muster up a script. I thought I had it nailed as it was working on test devices that were just enrolled purely for testing, until I was asked to put it onto another group. Intune doesn't say the script fails - indicating there are no errors. However, I am not saying there isn't. Detect: Remediate: Thanks for your time, Dean
FSLogix - 48v35 error at Microsoft login prompt in AVD
I'm resposting from this thread to hopefully create more attention for this problem: https://answers.microsoft.com/en-us/outlook_com/forum/outlk_win-outtop_new-outsub_ofb/outlook-error-message-somehting-went-wrong-48v35/97d7ff71-8a58-40c8-8726-adf3d1f095b8 Me and other admins (from reposted thread) have specific users who experience M365 authentication problems after upgrading to the latest FSLogix version(s) that offers support for New Teams. The error occurs in the Azure Virtual Desktop environment, when a user tries to open a Microsoft application (Outlook, OneDrive etc.). Not all users have the problem that they need to reauthenticate, or can't authenticate at all, with the 48v35 error. The users who do however, repeatedly get the same error after a few days or a week. We tried multiple things, like removing the Microsoft.AADBrokerPlugin directory or creating a completely new FSLogix profile, but the problem stays for these users. In my case I am using the FSLogix setting RoamIdentity=1. Is there any news from FSLogix on this issue? Or does anyone have workarounds to share? I would like to update more customer environments to use the New Teams, but with these issues I would rather wait.FSLogix - Automatically fix RW.vhdx corruption
When the RW.vhdx is corrupt, the user ends up with an read only profile. Manual intervention is required to remove the RW file which can't be merged into the base profile to restore R/W access to the profile. The following error is logged in the event viewer: "Open vDisk Failed, file:<path to RW.vhdx> (The chain of virtual hard disks is corrupted) There is a mismatch in the identifiers of the parent virtual hard disk and differencing disk." Feature Request: Automatically remove a corrupt RW file when detected. As it can't be recovered anyway, deleting the corrupt file will at least restore functionality (R/W access to profile).
CCD Locations Syntax
I would recommend changing the information regarding the syntax in the documentation for "CCDLocations" when file shares/SMB is in use from "type=smb,name="WINDOWS SMB PROVIDER",connectionString=\\<server-name>\<share-name>" to "type=smb,connectionString=\\<server-name>\<share-name>." I have had no success using the "WINDOWS SMB PRVIDER" in the syntax for CCDLocations.
Major bugs and issues.
Well I am facing issue in app such as I can't login my outlook acc at the start page and inside app too I can't login. Next I can't connect my PC with my ip address it had some error code 0x07 and some number saying that my pc don't have the requirements I song know what it meant. Nice ui but bugs and major issue is prblmatic I have some troubleshooting logs but this feedback page don't have file sending option, if help needed email me. Your respectfully Edge lover
Remember blank user password. Remote desktop
Hello devs! I love the work you're doing with the Windows app. I have one small issue that would be nice to have. I log on the remote PC with a saved user credentials without (blank) password, and every time I want to connect to the PC the popup show's up, then I have to click continue''. With other PC's and password protected users saved credentials work as expected. I understand / assume that the behaviour is if you didn't set a password for the user, ask for it everytime, but blank password user are a thing, specially in safe closed environments. perhaps a flag could be saved after logging the first time with this user without password to not re-prompt in the future. Keep up the good work! Juanma
Azure AD / Entra ID and Microsoft 365 Basic
In the last few weeks, I have struggled with new technologies. This encompasses the latest on the market in Android based mobile phones and a new Ryzen 9 mini desktop computer. To eliminate both old phone apps and old laptop applications in the MS Store (Apps) update, I wiped old phone access to accounts via Edge and Google. However, old laptop, which is an HP Ryzen 3 held on to apps and preferences somewhere across systems. So, on both my new mini desktop and the old laptop, I used PowerShell to eliminate remnants of DevHome Pre and CoPilot Pre which kept popping up. Low and behold, I saw new things in my Microsoft and Google Play stores on my devices. Not sure why this would not have happened on installation... Then thinking I was ready to remove XBOX. I did this as well via PowerShell commands. So, now both my machines are work machines with the AMD graphics qualities and XBOX gaming services. Then I removed any old credentials on the old laptop that would use my email address attached to the Work and School account. However, Azure AD and Entra ID will not let me run anything as related to my own accounts. For example, a) I can't change my own password on the Azure AD / Entra ID page. When I attempt to change my password, I get a writeback error: SSPR_0010. However, you need to buy Entra ID Connect to correct this. Entra ID is a trial version to my Azure AD sign-ins so even if I exist in Entra ID and Microsoft is moving to Entra ID, why am I being forced into purchasing things to correct this issue? b) I can't enroll into Microsoft 365 Business Basic using my Work and School Account email address. The enrollment sends me to a blank screen and never enrolls. If I try a second time using my Work and School email address, I get an error that states I have to use a different email address. It seems someone besides me is using my email address here for account access because the Work and School account holds a Visio (web only version) and my Personal account holds a real one that I can't use on my new mini which uses my own email address and not gmail.com or outlook.com. c) Edge creates a blank profile on its own that does not have my profile information in it if I do not use my Work and School account email address to sign-in. I keep losing my profile on first tab load in Edge. d) The Windows 11 Pro license on my new mini request my Work and School account login. The two have nothing to do with each other except that the email address is the same for account purposes. At one point, this CoPilot screen that says "Coming Soon" did not appear and now it is back again. Can you please assist in resolving this issue? I should technically be able to remove my Windows Live account that uses my Work and School email address and recreate it on a new machine without this much of a hassle.
