Put quotes around ImagePath keys

If the Imagepath key for a service has spaces, it should have quotes around the value to avoid running malicious code.

Advertisements

audit / remediate outdated profile

Using SCCM and compliance settings, you want to search for old profiles (unused for 90 days).  You want to make sure only Domain (not local ) account profiles are wiped out.  And you want an exception list, stored in an AD group.  When found, you want to report on Compliance (if no outdated profiles) and you want to remediate if found.