Upon graduation, students should remove their computers from the SHU network.
This removes all the restrictions on the laptop but the process does not affect any of your data nor pre-installed software.
When performing the removal steps, please ensure that you follow the instructions exactly as written.
Failing to do so may result in loss of data and/or functionality of device.
Please note:
Process only is valid when a student is graduating from the university.
Process only applies to SHU-issued Windows 10 devices.
Below outlines the steps to do so:
How to determine if device is attached to either the SHU.edu domain or Azure/InTune.
Based upon whether joined to domain or Azure/InTune then:
a. How to un-join from domain.
OR
b. How to un-join from Azure/InTune.
Left click once on the Start menu icon in menu bar and try in “access work or school”. Select from list of search results “Access Work or School”.
2. Resulting screen will differ based upon which network device is connected to:
If it says "Connect to SHU AD domain", this machine is joined to the shu.edu domain
If it says "Connected to Seton Hall University’s Azure AD", this machine is joined to Azure/InTune.
In the search box, type Computer Management and then launch the program.
In the Computer Management screen, select Local Users and Groups, and then select Users.
Right click Administrator and choose Set Password.
You will receive an alert message about changing the password. Select Proceed.
Enter the new password and click OK. The password has to meet the university’s domain password complexity requirements of 14 characters or more.
Please remember the password you have previously selected. After removing your device from the Seton Hall University domain, the Technology Service Desk will not be able to reset the password for you.
If the password does not meet our domain password policy requirements, you will see an error message like this. Click OK and enter a new password that does meet those requirements.
Once the new password has been set, select OK.
Right click Administrator and select Properties.
Make sure the Password never expires option has been actively checked. Click OK to exit the dialog.
Sign out of your computer.
On the Windows Login screen, select Other user
In the User name field, type .\administrator with the password you just created. Your computer name will display in Sign in to field. Hit Enter to log in.
In the Search box, type Control Panel System then launch the program.
Select Advanced system settings.
Select the Computer Name tab and select Change.
Select Workgroup, type WORKGROUP and select OK.
Select OK
Type Administrator and the password you have created. Select OK.
Select OK to restart the computer and then Restart Now
When machine restarts, enter password you chose to log in to Administrator account.
Go to C:\Users folder and look for your domain profile folder
Right click your profile folder, choose Send to - Desktop (create shortcut).
Your domain profile folder shortcut is now available on your new Desktop.
Double click the domain profile shortcut and Continue.
You have successfully removed the machine from the domain. You can access your previous data and files from the shortcut on your Desktop.
On the keyboard, hold down the Windows flag key and hit "R" key.
(the Windows flag key will be located by the space bar and looks like the Microsoft logo).In the run box, type in "control" (without the quotes) and hit enter on the keyboard.
In the upper right-hand corner of the Control Panel will be a "View by:" option with selections of "Category", "Small icons" or "Large icons".
Please ensure it is set to either the "Small icons" or "Large icons" view and select the entry for "BitLocker Drive Encryption".
(please note: process below requires you have a USB drive available)Select “Click Back up your recovery key” link.
If BitLocker is off on your machine, you may skip this process.On the “How to you want to back up your recovery key?” screen, select “Save to a file”.
You will get an alert indicating that you “This location can’t be used … Choose a different location”.
Insert your flash drive and save the recovery key to it (typically your flash drive would be drive “D:/”
Please note: you should have the file in a safe place, if you ever need to recovery your hard drive you will need this key fileLeft click once on the Start menu icon in menu bar and try in “computer management”. Select from list of search results “Computer management”.
In the “Computer Management” screen, select “Local Users and Groups” and then select “Users”.
Right click on the “Administrator” user entry and select “Properties”.
On the Properties screen ensure that the following is completed:
- “Password never expires” actively has a check box/checked off
- “Account is disabled” does NOT have a check box/NOT checked offRight click on the “Administrator” user entry and select “Set Password”.
You will get an alert message around “are you sure?”, select “Proceed” button.
Enter and re-enter a new password for the Administrator account and then select “OK” button.
You will then get an alert indicating that password updated.
Please note: The password being set can NOT be reset by the IT Service Desk. You must remember this password.Click the Start menu, select “Shut down or sign out” and then select “Sign out”
On the traditional login screen, select “Other user” (in lower left corner).
For the username, enter “./administrator" (without the quotes) and enter the password you just created.Left click once on the Start menu icon in menu bar and try in “access work or school”. Select from list of search results “Access Work or School”.
On the “Access work or school” screen select the entry for “Connect to the Seton Hall University’s Azure AD” and select the “Disconnect” button.
You will get a prompt asking “Are you sure you want to remove this account? …”, select “Yes” button.
Then select the “Disconnect” button on the “Disconnect from the organization” screen.You will then be prompted to enter a username/password to continue.
Enter “administrator” (without the quotes) and the password you created.
You will then be prompted to “Restart now” or “Restart later”, select “Restart now” button.On the login screen, username should pre-populate as “Administrator" (without the quotes) and enter the password you created.
Open the “My Computer” icon, double click on the “C:/” drive and then open the “Users” folder.
In the list of users right click on your eight-letter SHU username, select “Send to” and then choose “Desktop (create shortcut)”
You will now see a new folder/shortcut called “<your usersname> - Shortcut” on the desktop. Double click it and when prompted enter “Continue”
Your computer has now been successfully removed from the SHU Azure/InTune network.
To use device in future:
A. continue to log in as “administrator” and the password you created.
B. your documents are stored in the “your username - Shortcut” folder