# Read ShellFolders of another user on the system

# $sid = (gwmi win32_useraccount | where {$_.name -eq "appv" }).sid
# (The above method is not the way to go because it is querying the complete active directory which is time & resource consuming)

$user= New-Object System.Security.Principal.NTAccount($env:USERDOMAIN, "erik")
$sid = $User.Translate([System.Security.Principal.SecurityIdentifier])
 
$null = New-PSDrive -PSProvider Registry -Name HKU -Root HKEY_USERS -ErrorAction SilentlyContinue
Get-ItemProperty "HKU:\$($sid.value)\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders"