I am trying to capture the user state and am looking to capture 2 specific folders, but I am not sure how to change the config around.
The folders are C:\Users\*whatever username is*\.random       and C:\Users\*whatever username is*\AppData\Roaming\Microsoft\Signatures
I have tried the following configuration with no success.

<pattern type="File">%CSIDL_APPDATA%\Microsoft\Signatures [*]</pattern>
<pattern type="File"> C:\*\.random\* [*]</pattern>

Also have tried
<pattern type="File">%CSIDL_PROFILE%\.random[*]</pattern>
<pattern type="File">%CSIDL_PROFILE%\[*]</pattern>

I have tried using the Kace support to make a custom config, but I have not been able to get it working.
Thank you in advanced!
0 Comments   [ + ] Show Comments


  • This content is currently hidden from public view.
    Reason: Removed by member request
    For more information, visit our FAQ's.
Please log in to comment


I would USMT scanstate everything and do a selected loadstate restore if you have the space

Have never gotten that specific with my migrations.  I did some googling and from what I just read I think you want:

<pattern type="File">%CSIDL_PROFILE%\* [*.random]</pattern>

<pattern type="File">%CSIDL_APPDATA%\Microsoft\Signatures\* [*]</pattern>

CSIDL_PROFILE is only recognized only in the user context.  You can this in the .xml files within sections with context=User and context=UserAndSystem.

here is how they did some lines in the sfpath.inf file, just different call formating for xml vs inf calls but same verbage

"%ProgramData%\* [windowscodeintegrity.luacdf]"
"%ProgramFiles%\* [windowscodeintegrity.luacdf]"
"%CSIDL_PROGRAM_FILESX86%\* [windowscodeintegrity.luacdf]"
"%Public%\* [windowscodeintegrity.luacdf]"
"%SystemRoot%\system32\DriverStore\* [*]"
"%SystemRoot%\system32\SMI\* [*]"
"%SystemRoot%\servicing\* [*]"
"%SystemRoot%\inf\nfssvr\$ [dsctrs.ini]"
"%SystemRoot%\system32\$ [nfsmgmt.msc]"
"%ProgramData%\Microsoft\Windows\GameExplorer\{47F97240-F857-4146-8F3D-7F16816BAE4E}\* [*]"
"%ProgramData%\Microsoft\Windows\Start Menu\Programs\Games [Microsoft® Tinker™.lnk]"
"%ProgramFiles%\Microsoft Games\Tinker [Microsoft® Tinker™.lnk]"

see as reference:



Answered 06/12/2014 by: SMal.tmcc
Red Belt

  • I have tried the code you provided with still no success. I have also tried the scanstate.exe as microsoft states, but I am getting an error when i use the scanstate.exe I:\usmtdata the error is Unable to Start. Scanstate return code:71.

    Any help would be appreciated. Thanks
    • I am off till Monday I will test some myself then. If you resolve it before then let me know
      • Just wondering if you had time to work on this?
        Thanks in advanced
Please log in to comment
Answer this question or Comment on this question for clarity
Admin Script Editor
Admin Script Editor is an integrated scripting environment available free here at ITNinja