HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\<SID> State value meaning

Viewed 2253

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\<SID> contains a value called State which is a bit mask DWORD.

All information I could find about it is this:

001 = PROFILE_MANDATORY
Profile is mandatory.

002 = PROFILE_USE_CACHE
Update locally Cached profile.

004 = PROFILE_NEW_LOCAL
Using a new local profile.

008 = PROFILE_NEW_CENTRAL
Using a new central profile.

010 = PROFILE_UPDATE_CENTRAL
Need to update central profile.

020 = PROFILE_DELETE_CACHE
Need to delete cached profile.

040 = PROFILE_UPGRADE
Need to upgrade profile.

080 = PROFILE_GUEST_USER
Using guest user profile.

100 = PROFILE_ADMIN_USER
Using administrator profile.

200 = DEFAULT_NET_READY
Default net profile is available & ready.

400 = PROFILE_SLOW_LINK
Identified slow network link.

800 = PROFILE_TEMP_ASSIGNED
Temporary profile loaded.

But exactly what do those values mean?! I've seen a non-administrator account with State = 100 for example.

Does State = 4 only appear when a user logged in for the first time and their profile got created, changing to a different state on 2nd login?

Will a State = 2 appear if a user is not using roaming profiles? What will be the value of State when a user is using a roaming profile that just got copied from the server?!

What exactly does State = 200 mean??

So many questions, because this information really seems to not be great.

Also that list appears to be missing at least one value, as I found a State = 8000 on a few users.

Does anyone happen to know exactly what these values mean??

0 Answers
Related