I am trying to capture the user state and am looking to capture 2 specific folders, but I am not sure how to change the config around.
The folders are C:\Users\*whatever username is*\.random       and C:\Users\*whatever username is*\AppData\Roaming\Microsoft\Signatures
I have tried the following configuration with no success.

<pattern type="File">%CSIDL_APPDATA%\Microsoft\Signatures [*]</pattern>
<pattern type="File"> C:\*\.random\* [*]</pattern>

Also have tried
<pattern type="File">%CSIDL_PROFILE%\.random[*]</pattern>
<pattern type="File">%CSIDL_PROFILE%\[*]</pattern>

I have tried using the Kace support to make a custom config, but I have not been able to get it working.
Thank you in advanced!
0 Comments   [ + ] Show Comments


  • This content is currently hidden from public view.
    Reason: Removed by member request
    For more information, visit our FAQ's.
Please log in to comment


I would USMT scanstate everything and do a selected loadstate restore if you have the space

Have never gotten that specific with my migrations.  I did some googling and from what I just read I think you want:

<pattern type="File">%CSIDL_PROFILE%\* [*.random]</pattern>

<pattern type="File">%CSIDL_APPDATA%\Microsoft\Signatures\* [*]</pattern>

CSIDL_PROFILE is only recognized only in the user context.  You can this in the .xml files within sections with context=User and context=UserAndSystem.

here is how they did some lines in the sfpath.inf file, just different call formating for xml vs inf calls but same verbage

"%ProgramData%\* [windowscodeintegrity.luacdf]"
"%ProgramFiles%\* [windowscodeintegrity.luacdf]"
"%CSIDL_PROGRAM_FILESX86%\* [windowscodeintegrity.luacdf]"
"%Public%\* [windowscodeintegrity.luacdf]"
"%SystemRoot%\system32\DriverStore\* [*]"
"%SystemRoot%\system32\SMI\* [*]"
"%SystemRoot%\servicing\* [*]"
"%SystemRoot%\inf\nfssvr\$ [dsctrs.ini]"
"%SystemRoot%\system32\$ [nfsmgmt.msc]"
"%ProgramData%\Microsoft\Windows\GameExplorer\{47F97240-F857-4146-8F3D-7F16816BAE4E}\* [*]"
"%ProgramData%\Microsoft\Windows\Start Menu\Programs\Games [Microsoft® Tinker™.lnk]"
"%ProgramFiles%\Microsoft Games\Tinker [Microsoft® Tinker™.lnk]"

see as reference:



Answered 06/12/2014 by: SMal.tmcc
Red Belt

  • I have tried the code you provided with still no success. I have also tried the scanstate.exe as microsoft states, but I am getting an error when i use the scanstate.exe I:\usmtdata the error is Unable to Start. Scanstate return code:71.

    Any help would be appreciated. Thanks
    • I am off till Monday I will test some myself then. If you resolve it before then let me know
      • Just wondering if you had time to work on this?
        Thanks in advanced
Please log in to comment
Answer this question or Comment on this question for clarity