FolderRisk: Caution
- Hidden
Default C:\Users\Default
Template profile (Default User) copied the first time a new user signs in.
What it’s for
C:\Users\Default is the template profile: the first time a new user signs in, Windows copies its contents to create that user’s profile. The folder is hidden, and applications get its path from the GetDefaultUserProfileDirectory function. It is also what the CopyProfile setting of an answer file changes to roll out a customized profile.
What it contains
NTUSER.DAT: the template hive, which is not loaded in normal operation.- A minimal profile tree (
AppData,Desktop,Documents, etc.) copied when each profile is created. - Customizations applied before the copy, for example with
CopyProfile.
Risks and best practices
- A change only reaches new profiles. Existing profiles stay as they are, but a mistake here (corrupted hive, wrong customization) spreads to every future user.
- To customize, use
CopyProfile, Group Policy or Intune rather than editing by hand. - If you must edit
NTUSER.DAT, load the hive withreg load, make the change, then unload it. This is image-preparation work, not something for a production machine. - Do not confuse it with
Default User, a junction inherited from Windows XP.
Useful commands
# Template profile contentsGet-ChildItem -Force C:\Users\Default
# Template hive (as administrator): load into the registryreg load HKU\DefaultTemp C:\Users\Default\NTUSER.DAT# After checking, unload it:reg unload HKU\DefaultTemp