Zachary Loeber

The personal website of Zachary Loeber.

Audit User Profile Folders With Powershell

This function will aggregate sub-folders within a folder on a server and attempt to associate them with user IDs within a domain and provide additional information. This script can also be used to move folders for disabled or non-existent accounts.

Description

If you find yourself needing to go through a load of old user profiles this function may be able to help. This function goes through a specified directory and can perform the following:

  • Look up user ids in AD which match the folder names and determine if they are enabled or even exist.
  • Move profiles where users are disabled to another folder
  • Move profiles where users are not found to another folder
  • Report on the size of each profile folder
  • Report on the most recently updated file within each profile folder
  • Report if errors were found accessing any files within a profile folder

Version

Version : 1.0.0 June 21th 2013

– First release

Notes

I only included the ability to move folders to the local volume. Also, deeply nested folders may throw errors. These are both shortcomings/limitations of the built in move-item powershell command and .NET. I tinkered with using powerrobocopy.ps1 instead but ultimately left it out to remove a dependency.

I use the lastlogontimestap AD property to determine the last logon for a user. If you are on a pre-2003 AD infrastructure then this script may not be for you (In fact, this decade may not be for you, upgrade your domain already!).

Conclusion

This script may be a good starting point for a user profile migration move or possibly a data archiving initiative within your organization. The function is currently limited to a single server and folder but can easily be expanded upon (that is the nature of free scripts after all!)

Downloads

Download the script from the technet gallery (more frequently updated)

Download the script from this site (less frequently updated)

comments powered by Disqus