Objective: Safely identify and remove cached Entra ID user profiles on local Windows devices to free up disk space and resolve profile issues.<\/p>\n\n\n\n
2. How to Safely Remove Profiles via PowerShell<\/strong> Method B: Remove by Folder Path 3. Essential Diagnostic Commands: <\/strong> Checking Cloud Connectivity with <\/strong> <\/p>\n\n\n\n Appendix: The GUI Method<\/strong> This executes the same safe removal process as the PowerShell commands above.<\/p>\n","protected":false},"excerpt":{"rendered":" Objective: Safely identify and remove cached Entra ID user profiles on local Windows devices to free up disk space and resolve profile issues.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[116,5,98,137,1,120],"tags":[],"class_list":["post-1970","post","type-post","status-publish","format-standard","hentry","category-intune-and-entra","category-it","category-it-knowledge-base-articles","category-powershell","category-uncategorized","category-windows","post-preview"],"_links":{"self":[{"href":"https:\/\/www.ultrex-kb.com\/index.php?rest_route=\/wp\/v2\/posts\/1970","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ultrex-kb.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ultrex-kb.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ultrex-kb.com\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ultrex-kb.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1970"}],"version-history":[{"count":1,"href":"https:\/\/www.ultrex-kb.com\/index.php?rest_route=\/wp\/v2\/posts\/1970\/revisions"}],"predecessor-version":[{"id":1971,"href":"https:\/\/www.ultrex-kb.com\/index.php?rest_route=\/wp\/v2\/posts\/1970\/revisions\/1971"}],"wp:attachment":[{"href":"https:\/\/www.ultrex-kb.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1970"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ultrex-kb.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1970"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ultrex-kb.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1970"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
Note on net user:
The standard net user<\/code> command only queries the local Security Account Manager (SAM) database. Because Entra ID users authenticate against the cloud, Windows does not create a local SAM account for them, making them invisible to net user<\/code>. The methods below must be used instead.<\/p>\n\n\n\n
1. How to View Profiles via PowerShell<\/strong>
To get a quick list of all user profiles currently cached on a machine, run the following command in an elevated PowerShell prompt.
Entra ID profiles can be identified by their SID, which always begins with S-1-12-1.<\/em><\/p>\n\n\n\nGet-CimInstance Win32_UserProfile | Select-Object LocalPath, SID<\/code><\/pre>\n\n\n\n
WARNING: Never delete a user\u2019s folder directly from C:\\Users<\/code>. Doing so leaves orphaned SID entries in the registry (ProfileList<\/code>). If that user logs into the device again, Windows will fail to load their profile and force them into a temporary profile (C:\\Users\\TEMP<\/code>).<\/p>\n\n\n\n
To cleanly wipe both the file system directory and the associated registry keys, run PowerShell as an Administrator and use the Remove-CimInstance<\/code> command.<\/p>\n\n\n\n
Method A: Remove by SID (Recommended)
<\/strong>Copy the SID from the viewing step and run:<\/p>\n\n\n\nGet-CimInstance Win32_UserProfile | Where-Object { $_.SID -eq \"S-1-12-1-YOUR-SID-HERE\" } | Remove-CimInstance<\/code><\/pre>\n\n\n\n
<\/strong>If you prefer to target the exact folder name located in C:\\Users<\/code>:<\/p>\n\n\n\nGet-CimInstance Win32_UserProfile | Where-Object { $_.LocalPath -like \"*\\TargetUsername\" } | Remove-CimInstance<\/code><\/pre>\n\n\n\nquser<\/code> and <\/strong>dsregcmd<\/code>
Before removing a profile or when troubleshooting an Entra ID login issue, you should use these two built-in command-line tools to understand the current state of the machine.
Checking Active Sessions with <\/strong>quser<\/code>
While Get-CimInstance<\/code> shows you every profile saved<\/em> on the disk, it doesn’t tell you if the user is currently using the machine.
Run this in CMD or PowerShell:<\/p>\n\n\n\nquser<\/code><\/pre>\n\n\n\n\n
quser<\/code> before deleting a profile to ensure the target user doesn’t currently have a locked\/disconnected session running in the background. You cannot cleanly delete a profile that is actively loaded into memory.<\/li>\n<\/ul>\n\n\n\ndsregcmd \/status<\/code>
If an Entra ID user is failing to log in, or their profile isn’t syncing properly, the issue might be with the device itself rather than the user profile.
Run this in CMD or PowerShell (no admin required):<\/p>\n\n\n\ndsregcmd \/status<\/code><\/pre>\n\n\n\n\n
\u2022 AzureAdJoined : YES<\/strong> (Under Device State): Confirms the machine is successfully joined to the client’s cloud tenant.
\u2022 AzureAdPrt : YES<\/strong> (Under SSO State): Confirms the user has a valid Primary Refresh Token. If this says NO, the user’s cloud credentials are out of sync or expired, which will break access to local Office apps and OneDrive.<\/li>\n<\/ul>\n\n\n\n
If technicians prefer a visual interface, or if you are doing a bulk cleanup on a single machine, use the native Windows tool:<\/p>\n\n\n\n\n
Win + R<\/code>) or CMD.<\/li>\n\n\n\nsysdm.cpl<\/code> and press Enter.<\/li>\n\n\n\n