PROFILE REMEDIATION

Browser Profile Reset.

Zero-touch profile remediation with automated data preservation. Safely reset corrupted Google Chrome and Microsoft Edge profiles without permanently losing the user's local bookmarks.

SEE HOW IT WORKS
WinRM Dispatcher ● CONNECTED

[UHDC] BROWSER PROFILE RESET

[i] Attempting connection to LAPTOP-US-4829 via WinRM...

> Securing bookmarks for jsmith...

> Terminating browser processes...

> Purging AppData and restoring bookmarks...

[UHDC SUCCESS] Browser profiles reset successfully via WinRM!

Automated Data Rescue

When standard cache-clearing protocols fail, a complete profile wipe is required. Executing this manually risks the permanent loss of locally stored bookmarks. This engine orchestrates a unified, multi-step sequence to rescue data before dropping the corrupted directories.

Unified Execution Pipeline

Establishes a single WinRM session to execute the entire 4-step remediation locally on the target. This drastically reduces network overhead compared to legacy scripts that pull files back and forth over SMB.

Local Data Rescue

Safely copies the user's SQLite Bookmarks files to a secure temporary directory (C:\Windows\Temp) on the target machine before forcefully dropping all active memory locks on the frozen browser.

Resilient Fallback

If the endpoint's firewall blocks WinRM, the engine automatically encodes the entire remediation payload into Base64 and deploys it via PsExec under the SYSTEM context to guarantee execution.

INTERACTIVE TRAINING ENGINE
⭐ 250 XP

How Junior Techs Learn This Tool:

While the UHDC uses a complex PowerShell pipeline to safely backup and restore the user's bookmarks during a reset, a junior technician should know how to forcefully wipe a corrupted application profile manually. The training engine teaches them how to utilize Sysinternals PsExec to remotely execute a chained CMD command to forcefully kill the frozen browser process using taskkill, and then completely delete the corrupted AppData directory using rmdir.

psexec \\$Target -s cmd.exe /c "taskkill /F /IM chrome.exe & rmdir /S /Q "C:\Users\$TargetUser\AppData\Local\Google\Chrome\User Data""

The In-Person Equivalent

Opening Task Manager to kill frozen browsers, navigating to %LocalAppData%, copying the Bookmarks file to the desktop, deleting the 'User Data' folders manually, and pasting the Bookmarks file back into the new folder.

Technical Q&A

Q: Why does this workflow require the technician to enter BOTH the Target PC and the Username?
Because the script executes locally on the target machine as a background administrative account (or the SYSTEM account via PsExec). It cannot rely on environmental variables like %LocalAppData% because that would point to the administrator's profile, not the user's. It needs the specific AD username to explicitly build the correct C:\Users\Username\AppData\... path.
Q: Why not just copy the bookmarks across the network to the technician's PC?
Transferring files back and forth over the network via SMB is slow and frequently blocked by modern endpoint firewalls. By backing up the bookmarks to a local temporary folder on the target machine itself, the entire operation executes in milliseconds and requires only a single WinRM or RPC port to be open.
Q: Will the user lose their saved passwords or browser extensions?
Yes, any locally cached data outside of bookmarks (like history, extensions, and local passwords) is purged. However, if the user is signed into Google Sync or Microsoft Enterprise Sync, their extensions and passwords will automatically pull back down from the cloud the moment they reopen the browser. This module specifically rescues the local bookmarks for users who do not utilize cloud sync.
Q: Can this be run while the user is actively working?
It can, but the user will see their browser suddenly vanish from their screen. It is best practice to send them a quick "Net Send" message via the console or call them to say, "I am going to quickly reset your browser now" before executing the workflow.