CCE-37515-4Platform: win2012r2 | Date: (C)2015-10-08 (M)2022-10-10 |
Exclude directories in roaming profile
This policy setting lets you exclude folders that are normally included in the user's profile. As a result, these folders do not need to be stored by the network server on which the profile resides and do not follow users to other computers.
Note: When excluding content from the profile you should try to exclude the narrowest set of data that will address your needs. For example, if there is one application with data that should not be roamed then add only that application's specific folder under the AppData\Roaming folder rather than all of the AppData\Roaming folder to the exclusion list.
By default, the Appdata\Local and Appdata\LocalLow folders and all their subfolders such as the History, Temp, and Temporary Internet Files folders are excluded from the user's roaming profile. On operating systems versions that support the Account Pictures folder, the Account Pictures folder and its contents are also excluded by default.
In operating systems earlier than Microsoft Windows Vista, only the History, Local Settings, Temp, and Temporary Internet Files folders are excluded from the user's roaming profile by default.
If you enable this policy setting, you can exclude additional folders.
If you disable this policy setting or do not configure it, only the default folders are excluded.
Note: You cannot use this policy setting to include the default folders in a roaming user profile.
Parameter:
Technical Mechanism:
(1) GPO: User Configuration\Administrative Templates\System\User Profiles!Exclude directories in roaming profile
(2) WMI: ###
CCSS Severity: | CCSS Metrics: |
CCSS Score : | Attack Vector: |
Exploit Score: | Attack Complexity: |
Impact Score: | Privileges Required: |
Severity: | User Interaction: |
Vector: | Scope: |
| Confidentiality: |
| Integrity: |
| Availability: |
| |
References: