Windows 10: Using Powershell to delete REG key for all users

fenrir0wulf · Aug 18, 2020

Hey all, not sure if this is the right place to ask, especially considering how pointed the question is.

We're trying to do a thorough clean install of a software due to changing the version (specifically, we're moving from SolidWorks 2017 to 2020 SP04). However, the issue is that uninstalling everything just doesn't actually clean everything. There seems to always be something left, especially in the registry. And of course, part of the registry is exclusive to each user, meaning I just can't clean everything through the Admin account.

So the question is this: Knowing that HKEY_USERS should contain all users that are on the computer, can I, through a Powershell script or something, delete the relevant registry keys for all users on the computer and how.

I've managed to find a few snippets of Powershell code through Google but it's not always clear what it does or why, and most importantly what I need to adapt.

So yeah, anyone got maybe some pointers?

:)

RickC · Aug 26, 2020

Using Powershell to delete REG key for all users

You haven't mentioned what environment you're in so I'm going to assume Domain.

To iterate through HKEY_USERS to do this for all users then you need all user profiles to be unloaded ('cos otherwise a logged-in user will have their NTUSER.DAT file locked for bulk editing).

However, if all users are logged out then you'll need to log in remotely as admin... and seach/replacement of registry keys of remote users is slow - particularly with devices used by multiple users - and a pain to set up and test beforehand unless you have a test environment.

I'm retired and no longer have an environment to test but, off the top of my head, you would be using:
Code:

$users = (Get-ChildItem -path c:\users).name
foreach($user in $users)
{
reg load "hku\$user" "C:\Users\$user\NTUSER.DAT"
# Do whatever you need with "hkey_users\$user" here which links to each users' HKU
# Example: Delete the 'Connected PDF' key without asking for confirmation
reg delete "hkey_users\$user\SOFTWARE\Foxit Software\Foxit Reader\ConnectedPDF" /f
reg unload "hku\$user"
}
Click to expand...

Alternatively, use Remove-Item -Path instead of reg delete.

I suggest a login script that makes the changes for each individual user will be easier for you to test and implement, even without a seperate test environment.

Hope this helps...

fenrir0wulf · Aug 26, 2020

Using Powershell to delete REG key for all users

Code:

$users = (Get-ChildItem -path c:\users).name
foreach($user in $users)
{
reg load "hku\$user" "C:\Users\$user\NTUSER.DAT"
# Do whatever you need with "hkey_users\$user" here which links to each users' HKU
# Example: Delete the 'Connected PDF' key without asking for confirmation
reg delete "hkey_users\$user\SOFTWARE\Foxit Software\Foxit Reader\ConnectedPDF" /f
reg unload "hku\$user"
}
Click to expand...

Click to expand...

Hah! That is literally the piece of code I found when googling. I guess this at least confirms that it works. Fortunately, I have a computer ready for testing. I'll try that and Revo.

fenrir0wulf · Aug 26, 2020

Using Powershell to delete REG key for all users

Hey all, not sure if this is the right place to ask, especially considering how pointed the question is.

We're trying to do a thorough clean install of a software due to changing the version (specifically, we're moving from SolidWorks 2017 to 2020 SP04). However, the issue is that uninstalling everything just doesn't actually clean everything. There seems to always be something left, especially in the registry. And of course, part of the registry is exclusive to each user, meaning I just can't clean everything through the Admin account.

So the question is this: Knowing that HKEY_USERS should contain all users that are on the computer, can I, through a Powershell script or something, delete the relevant registry keys for all users on the computer and how.

I've managed to find a few snippets of Powershell code through Google but it's not always clear what it does or why, and most importantly what I need to adapt.

So yeah, anyone got maybe some pointers?

Windows 10: Using Powershell to delete REG key for all users

Using Powershell to delete REG key for all users

Using Powershell to delete REG key for all users

Using Powershell to delete REG key for all users

Using Powershell to delete REG key for all users - Similar Threads - Using Powershell delete

reg deletions need undoing?

reg deletions need undoing?

Could not use bash command in the powershell -Reg.

Safe to delete this reg key? ..CurrentVersion\AppModel\StateRepository

changing key in reg

How to copy/create a reg key to every user in hkey_current_user?

Is deleting content in reg key "PackageList" safe?

How to Delete All Saved Passwords in Microsoft Edge w/ bat or reg key

How to Delete all SMBshares using Powershell?