Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Upon graduation, students should Graduating students are required to remove their computers from the Seton Hall University (SHU) network. This removes all the process will lift all SHU-specific restrictions on the laptop but the process does not affect any of your data nor while ensuring that your personal data and any pre-installed software remain unaffected.

When performing It is crucial to follow the removal steps, please ensure that you follow the instructions exactly as written.
Failing to do so may could result in loss of data and/ or functionality of device.

Please note:

...

on your device. If you encounter any difficulties, please contact the Technology Service Desk for assistance.

Info

Important Notes:

  • This process is only valid for students who are graduating from the university.

...

  • This process only applies to SHU-issued Windows 10

...

Below outlines the steps to do so:

...

  • /11 and SHU-issued Apple Macintosh laptops.

  • Before beginning below domain removal processes, please ensure that all data is backed up to your OneDrive for Business account.

Steps to Remove Your Computer from the SHU Network

If you have a SHU-issued Apple Macintosh laptop, you can skip this step.

To begin, determine if your device is connected to either the SHU.edu domain or

...

Entra ID (formerly known as Azure) via InTune.

Once you identify your connection type, follow the appropriate steps:

  • Disconnect from the SHU.edu domain

  • Disconnect from Entra ID/InTune

Refer to the detailed instructions below for the specific steps based on your connection type.

Expand
title1. How to determine Determine if the device is attached joined to either the SHU.edu domain or AzureEntra ID/InTune.
  1. Left click once on Click the Start menu icon in menu bar and try in “access work or school”. Select from list of search results “Access Work or School”.

    Image Removed

    2. Resulting screen will differ based upon which network device is connected to:
    If it says "Connect to SHU AD domain", this machine is joined to the shu.edu domain

    Image Removed

    If it says "Connected to Seton Hall University’s Azure AD", this machine is joined to Azure/InTune.

    Image Removed

    in the taskbar. Then, type "access work or school" in the search bar and select Access work or school system settings from the search results.

    Image Added

  2. You will be directed to a screen that shows how your computer is connected.

    1. If the computer is joined to the SHU.edudomain, you will see: "Connected to SHU AD domain."

      Image Added

    2. If the computer is joined to Entra ID/InTune, you will see: "Connected to Seton Hall University’s Entra ID."

      2. accessworkschool_intune.pngImage Added

Expand
title2a.

...

Disconnect from shu.edu domain (Connected to SHU AD domain)

...

In the search box, type Computer Management and then launch the program.

...

Open Computer Management

  1. Click the Start menu icon in the taskbar. Type "Computer Management" in the search bar and select the Computer Management app from the search results.

    computer managementImage Added

  2. In the Computer Management screen, select Local Users and Groups,

...

  1. then

...

  1. Users.

    local users and groupsImage Added

...

Set Administrator Properties

  1. Right-click on the Administrator name and

...

  1. select Properties.

...

You will receive an alert message about changing the password. Select Proceed.

...

Enter the new password and click OK. The password has to meet the university’s domain password complexity requirements of 14 characters or more.
Please remember the password you have previously selected. After removing your device from the Seton Hall University domain, the Technology Service Desk will not be able to reset the password for you.

...

  1. If the password does not meet our domain password policy requirements, you will see an error message like this. Click OK and enter a new password that does meet those requirements.

    weak passwordImage Removed

...

Once the new password has been set, select OK.

...

Right click Administrator and select Properties.

...

Make sure the Password never expires option has been actively checked. Click OK to exit the dialog.

...

  1. admin propertiesImage Added

  2. Check the Password never expires box, if it is not already selected. Ensure that Account is disabled box is NOT checked.

    password never expiresImage Added

  3. Click OK to save changes and exit.

Set the Administrator Password

Note

This password cannot be reset by the IT Service Desk. Remember it for future use.

  1. Back on the Computer Management screen, right-click on the Administrator name and select Set Password from the menu.

    administrator propertiesImage Added

  2. A warning message will appear. Click Proceed.

    set password for administratorImage Added

  3. Enter and confirm a new password that meets the following requirements.

    1. At least 14 characters

    2. Includes an uppercase letter, a lowercase letter, and a number

    3. Does not include parts of your username

      new passwordImage Added

    4. Click OK.

    5. If the password does not meet the requirements, an error message will appear. Click OK to retry.

      weak passwordImage Added

Log in as Administrator

  1. Sign out of your computer

...

...

  1. Image Added

  2. On the Windows

...

  1. login screen, select Other user

...

  1. .

  2. In the

...

  1. Username field, type .\administrator

...

  1. (include the period and slash).

  2. In the Password field, enter the password you just created.

...


  1. Sign in as Other userImage Added

  2. Ensure your computer name

...

  1. appears in the Sign in to field

...

  1. , then press Enter to log in.

In the Search box, type Control Panel System then launch the program.

...

Change Domain Membership

  1. Open the Control Panel System by typing "Control Panel System" in the search bar and selecting the result.

    Control Panel SystemImage Added

  2. Select Advanced system settings.

...

  1. In the Computer Name tab

...

  1. , click the Change button.

...

Select Workgroup, type WORKGROUP and select OK.

...

Select OK

...

  1. Change domain nameImage Added

  2. Under Member of, select the Workgroup radio button and type WORKGROUP in the text field.

    workgroup nameImage Added

Confirm and Restart

  1. A pop-up window will appear reminding you to remember the local administrator password. Click OK.

    domain name change screenImage Added

  2. Enter the Administrator username and the password you

...

  1. created

...

  1. , then click OK.

...

Select OK to restart the computer and then Restart Now

...

...

When machine restarts, enter password you chose to log in to Administrator account.

...

  1. confirm password screenImage Added

  2. A confirmation window will appear. Click OK, then select Restart Now.

    restart nowImage Added

Access Your Domain Profile

  1. After the restart, log in to the Administrator account using the password you created.

  2. Open File Explorer and double-click Local Disk (C:) to access the C:\Users folder

...

  1. .

  2. Locate your domain profile folder

...

  1. (your eight-letter SHU username).

    user folderImage Added

  2. Right-click

...

  1. the folder,

...

  1. select Send to

...

  1. Desktop (create shortcut).

...

  1. send to desktopImage Added

  2. Your domain profile folder shortcut

...

  1. will now

...

  1. be on your

...

  1. desktop.

...

  1. Double-click the

...

  1. shortcut to access your files. If prompted, click Continue.

    Shared folder on desktopImage AddedImage Added

Using the Device Moving Forward

  • Option A: Continue to log in as the Administrator using the password you created.

  • Option B: Access your documents through the domain profile shortcut folder on your desktop.

Expand
title2b.

...

Disconnect from Entra ID/InTune (Connected to Seton Hall University’s

...

Entra ID)

Steps to Back Up Your BitLocker Recovery Key

Note

Steps 1-7 below require you to have a USB drive available.

  1. Press the Windows flag key

...

  1. (located

...

  1. near the spacebar, resembling the Microsoft logo) and the "R" key simultaneously.

  2. In the

...

  1. Run box that appears, type

...

  1. "control"

...

  1. and press Enter.

  2. In the upper-right

...

  1. corner of the Control Panel

...

  1. , locate the View by:

...

  1. option. Select either Small icons

...

  1. or

...

  1. Large icons

...

  1. from the dropdown menu.

...

  1. In the Control Panel, click BitLocker Drive Encryption

...

  1. .

  2. On the BitLocker Drive Encryption screen, select the Back up your recovery key

...

  1. hyperlink.
    Note: If BitLocker is turned off

...

  1. , you

...

  1. can skip this process and proceed to Step 7.

  2. On the

...

  1. How

...

  1. do you want to back up your recovery key?

...

  1. screen, select

...

  1. Save to a file

...

  1. .

...

  1. Image Added

  2. If you see an alert stating, This location can’t be used

...

  1. ... Choose a different location,

...

  1. insert your USB drive (usually labeled as drive "D:/") and save the recovery key to it

...

  1. .

Open Computer Management

  1. Click the Start menu icon

...

  1. in the taskbar. Type "Computer Management" in the search bar and select the Computer Management app from the search results.

    computer managementImage Added

  2. In the Computer Management screen, select Local Users and Groups

...

  1. , then

...

  1. Users

...

  1. .

    local users and groupsImage Added

...

Set Administrator Properties

  1. Right-click on the

...

  1. Administrator

...

  1. name and select

...

  1. Properties

...

  1. .

...

  1. admin propertiesImage Added

...

On the Properties screen ensure that the following is completed:
- “Password never expires” actively has a check box/checked off
- “Account is disabled” does NOT have a check box/NOT checked off

Right click on the “Administrator” user entry and select “Set Password”.

...

Click the Start menu, select “Shut down or sign out” and then select “Sign out

...

On the traditional login screen, select “Other user” (in lower left corner).
For the username, enter “./administrator" (without the quotes) and enter the password you just created.

...

Left click once on the Start menu icon in menu bar and try in “access work or school”. Select from list of search results “Access Work or School”.

...

On the “Access work or school” screen select the entry for “Connect to the Seton Hall University’s Azure AD” and select the “Disconnect” button.

...

  1. Check the Password never expires box, if it is not already selected. Ensure that Account is disabled box is NOT checked.

    password never expiresImage Added

  2. Click OK to save changes and exit.

Set the Administrator Password

Note

This password cannot be reset by the IT Service Desk. Remember it for future use.

  1. Back on the Computer Management screen, right-click on the Administrator name and select Set Password from the menu.

    administrator propertiesImage Added

  2. A warning message will appear. Click Proceed.

    set password for administratorImage Added

  3. Enter and confirm a new password that meets the following requirements.

    1. At least 14 characters

    2. Includes an uppercase letter, a lowercase letter, and a number

    3. Does not include parts of your username

      new passwordImage Added
    4. Click OK.

    5. If the password does not meet the requirements, an error message will appear. Click OK to retry.

      weak passwordImage Added

Log in as Administrator

  1. Sign out of your computer

    Image Added

  2. On the Windows login screen, select Other user.

  3. In the Username field, type .\administrator (include the period and slash).

  4. In the Password field, enter the password you just created.

    Sign in as Other userImage Added

  5. Ensure your computer name appears in the Sign in to field, then press Enter to log in.

  6. Click the Start menu. Type "access work or school" in the search bar and select Access work or school system settings from the search results.

    Image Added

  7. On the Access work or school screen, click the down arrow next to Connected by <shortname>@shu.edu and select the Disconnect button.

    2b_18 workschool_intune.pngImage Added

  8. When prompted with “Are you sure you want to remove this account?

...

  1. ”,

...

  1. click Yes

...

  1. .

...

  1. On the

...

  1. Disconnect

...

  1. from the organization

...

  1. screen, select Disconnect again.

  2. You will

...

  1. be prompted to

...

  1. authenticate. In the Username field, type Administrator. In the Password field, enter the password you previously created.

...

  1. Click OK to complete the process.

Confirm and Restart

  1. A confirmation window will appear. Click OK, then select Restart Now.

    restart nowImage Added

Access Your Domain Profile

  1. After the restart, log in to the Administrator account using the password you created.

  2. Open

...

  1. File Explorer and double-click Local Disk (C:) to access the C:\Users folder.

  2. Locate your domain profile folder (your eight-letter SHU username).

    user folderImage Added

  3. Right-click the folder, select

...

  1. Send to

...

  1. Desktop (create shortcut)

...

  1. .

    send to desktopImage Added

  2. Your domain profile folder shortcut will now be on your desktop. Double

...

  1. -click the shortcut to access your files. If prompted, click Continue.

    Shared folder on desktopImage Added

Uninstall CrowdStrike Windows Sensor

  1. Click Start, then select Settings.

  2. Navigate to Apps and choose Installed apps.

  3. Locate CrowdStrike Windows Sensor in the list of installed apps.

  4. Select it, then click Uninstall.

  5. Follow the on-screen prompts to complete the removal process.

  6. If you receive a security alert in the bottom-right corner of your screen during this process, you may safely disregard it.

Using the Device Moving Forward

  • Option A: Continue to log in as the Administrator using the password you created.

  • Option B: Access your documents through the domain profile shortcut folder on your desktop.

...

Expand
titleRemove a Mac from the SHU domain
Note

To remove your Mac from the Seton Hall domain, you must be on a Seton Hall campus.

  1. Select the Apple menu, then choose System Preferences.

  2. Within System Preferences, select Users & Groups.

  3. Click the lock icon in the bottom-left corner to unlock settings, then enter your administrator username and password.

  4. In the Users & Groups panel, locate the Network Account Server: SHU field. Click the Edit button next to it.

    Image Added

  5. In the panel displaying the active SHU Active Directory Domain connection, select the minus (-) button.

    Image Added

  6. When prompted to Unbind from the Active Directory Domain, enter your eight-character Seton Hall username and password, then click Unbind.

    Image Added

  7. You will be prompted to enter credentials to allow System Preferences to modify the system.
    Enter your local machine username and password (this may differ from your SHU credentials).

    Image Added

  8. Once the device has been unbound from the SHU.edu domain, select the Apple menu and choose Reboot.

  9. After rebooting, log in using your local machine username and password.