Per GPO bestimmten User auf den Client und Server löschen

function Remove-Userprofile {
    [cmdletbinding(SupportsShouldProcess=$true,ConfirmImpact="High")]  
    param(
        [Parameter(mandatory=$true)][string[]]$identity
    )
    begin {
        if(!(new-object System.Security.Principal.WindowsPrincipal([System.Security.Principal.WindowsIdentity]::GetCurrent())).IsInRole(544)){
            write-error "CMDLet needs to be run elevated!" -Category PermissionDenied  
            break
        }
        Add-Type –MemberDefinition '[DllImport("ntdll.dll")] public static extern int RtlAdjustPrivilege(int Privilege, bool Enable, bool CurrentThread, ref bool EnabledOut);' -name token -namespace priv | out-null  
        9,17,18 | %{[void][priv.token]::RtlAdjustPrivilege($_,1,0,[ref]0)}
        $userprofiles = Get-CimInstance Win32_Userprofile | ?{!$_.Special -and !$_.Loaded}
    }
    process{
        foreach($ident in $identity){
            if ($ident -notlike 'S-1-5*'){  
                try{
                    $ident = (New-Object System.Security.Principal.NTAccount($ident)).Translate([System.Security.Principal.SecurityIdentifier]).Value
                }catch{}
            }
            $profile = $userprofiles | ?{$_.SID -eq $ident}
            if ($profile){
                if ($PSCmdlet.ShouldProcess($ident,"Remove user profile")){  
                    Write-Verbose "Removing profile for identity '$ident'"  
                    # remove userprofile
                    $profile | Remove-CimInstance
                    # remove profile data
                    if (Test-Path -LiteralPath $profile.LocalPath -PathType Container){
                        remove-item -LiteralPath $profile.LocalPath -Recurse -Force
                    }
                }
                
            }else{
                Write-Warning "Profile for identity '$ident' not found."  
            }
        }
    }
    end{}
}

Remove-Userprofile -identity 'Test' -verbose  

Remove-Userprofile -identity 'DOMAIN\Test' -verbose