XP Security Issue

Z

zavier

Weaksauce
2FA
Joined
Oct 7, 2006
Messages
76
At my office I have a Dell Latitude D 820 which I am now allowed to bring home. I have Windows Xp pro in the laptop. There were 2 other users in addition to myself. All 3 of us with admin privileges. We were also connected to a domain.
Here is the problem. When I got home I decided to change my password. The system did not allowed because I was on a domain. So I decided to remove the domain and get connected to my home workgroup. Well, my account disappeared but I was able to get back on my laptop by using one of my coworker's account. Then I made a new account for myself with admin priviledges. All programs work..ie Word, Mozilla and others. But I have others problems. I can't enable Automatic Updates. It's all grayed out. I can't open windows firewall because ICS is not enabled. If I run enable ICS it says "Could not start ICS. Error 1068..I can't go into my registry. If I run command prompt or regedit nothing happens. If I go in safe mode non of the above works.

Anyway, at this point I am not ready to relaod XP. Any thoughts or questions
Thanks
zavier
 
When you attach to a domain, your administrator has the ability to push policies to your workstation to control what you can and can't do. When the domain disappears, the policies don't go away.

There is probably nothing wrong with your computer -- it sounds like it's locked down with policies and it is looking for something on the domain. I recommend that you contact your administrator and ask them for assistance.

I would also avoid removing your workstation from the domain if your administrator set it up that way. It's not a good way to become popular with your IT staff!
 
Assuming this is meant to be your personal system now, and no longer needs any domain access, the first step is one you have already down, to make a local account with admin privs. You should also be able to change the local admin's password as well. Then, assuming all above is true, remove it from the domain, reboot, and login in with one of your local accounts. Remove the domain users, and their profiles, and then run some general clean up steps. You should be good to go, but as mentioned, you'll still have domain policies in place.

If it was me, I'd reload the OS without another thought, so it was set up clean and without domain policies.
 
Uh, he won't be able to remove the machine from the domain unless he knows a domain admin username and password.
 
You can remove the machine from the domain with only local admin rights, it won't remove the computer account from AD though. Since he wasn't connected to the network and he said he removed it from the domain this would be the case.
 
Mister Natural said:
Uh, he won't be able to remove the machine from the domain unless he knows a domain admin username and password.
Click to expand...

LOL yep...


OP... This is something you want to run by the IT Department first... Otherwise you run the chance of pissing them off when they have to fix what you jack up.
 
Thanks to all for your replays...

Just to let you know, The laptop is now meant to be your personal system now, and no longer needs any domain access. I had setup a Workgroup at home and figured I can join the laptop with my desktop...
So the way I removed myself from the Domain was to go Start -> Control Panel -> System. In Sytem Properties hit Computer Name. Then at the bottom To rename the computer or join a domain, click Change. Then I clicked Member of Workgroup which removed the tick on Domain.
 
Yeah, I thought you should be able to do that, especially since your domain accounts had local admin access. I swore I had done this before on several laptops that were decommisioned before.
 
DeaconFrost...last question
"You should be good to go, but as mentioned, you'll still have domain policies in place."

What do I do to remove the domain policies ??
 
The easiest way to remove them, unfortunately, is to do a fresh install of XP. That's why I suggested above that if it was my system, I'd do a fresh install. You'd end up with a clean system, with updated system drivers.
 
Hmm... I've never taken a client OUT of a domain before... And even with I do, going from Company data to Personal data, I'd always do a wipe and reformat...


Honestly I'd just do that. Backup your data files and reinstall XP.
 
You must log in or register to reply here.
Back
Top