Upon graduation, students must remove their computers from the SHU network.
While this process will remove all of the restrictions on the laptop, it will not affect any of your data or pre-installed software.
When performing the removal steps, please ensure that you follow the instructions exactly as written. Failing to do so may result in loss of data and/or functionality on your device.
Please note:
This process is only valid for students who are graduating from the university.
This process only applies to SHU-issued Windows 10/11 and SHU-issued Apple Macintosh laptops.
Before beginning below domain removal processes please ensure that all data is backed up to your OneDrive for Business account.
Follow the steps below to remove your computer from the SHU network.
If you have a SHU-issued Apple Macintosh laptop you may skip this step.
First, determine if the device is joined to either the SHU.edu domain or Azure/InTune.
Depending on your connection type, follow the steps outlined below to:
a. Disconnect from shu.edu domain.
OR
b. Disconnect from Azure/InTune.
Click on the “Start” menu icon in menu bar. Then, type “access work or school” in the search bar. Select “Access work or school” system settings in the search results.
2. You will be taken to a screen that will identify how your computer is connect.
If the computer is joined to the shu.edu domain, you will see "Connected to SHU AD domain".
If the computer is joined to Azure/InTune, you will see "Connected to Seton Hall University’s Azure AD".
Click on the “Start” menu icon in menu bar. Then, type in “Computer Management” in the search bar. Select “Computer Management” app from the search results.
On the Computer Management screen, select “Local Users and Groups”, then select “Users”.
Right-click on the “Administrator” name and select “Set Password” from the menu options.
You will receive an alert message about changing the password. Select the Proceed button.
Enter and re-enter a new password that aligns with the University’s password policy requirements (see below), then click OK.
Please note: The password being set can NOT be reset by the IT Service Desk. You must remember this password moving forward.
Password requirements:
At least 14 characters
A lowercase letter
An uppercase letter
a number
No parts of your username
If the password does not meet our domain password policy requirements, you will see an error message like this. Click OK to enter a new password that meets the password requirements criteria.
Once the new password has been set, select OK to return to the Computer Management screen.
Right-click on the “Administrator” name again and select “Properties” from the menu options.
If not already selected, check the “Password never expires” box. Then, click OK to exit the dialog.
Sign out of your computer.
On the Windows login screen, select “Other user”.
In the username field, type “.\administrator” (note the <period> and <slash> before administrator). In the password field, enter the password that you just created. Your computer name will display in “Sign in to” field. Hit Enter to log in.
In the search box on your task manager bar, type “Control Panel System”. Then, click the control panel system search result to launch the program.
Select “Advanced system settings”.
Select the “Computer Name” tab, then select the “Change” button.
Under the “Member of” section of this screen, select the “Workgroup” radio button, then type “WORKGROUP” (without quotes) in the text field. Select OK once completed.
You will see a pop-up window reiterating that you will be responsible for remember the local administrator password used to sign into the computer. Select OK.
You will be prompted to enter the name and password. Type “Administrator” (without quotes) in the username field and the password you created. Once entered, select OK.
A new pop-up window will appear, select OK to restart the computer and then the “Restart Now” now button.
When machine restarts, enter the password you created to log into the Administrator account.
Click on your “File Explorer” icon, then double click the “Local Disk” to access the C:\Users folder and look for your domain profile (eight-letter SHU username) folder.
Right-click your domain profile (eight-letter SHU username) folder, choose “Send to” > “Desktop (create shortcut)”.
Your domain profile folder shortcut is now available on your new desktop. Double click it and when prompted enter “Continue”.
You can access your previous data and files from this shortcut on your desktop.
You have successfully removed the machine from the domain.
To use device in future:
A. continue to log in as “administrator” and use the password that you created.
B. Your documents are stored in your domain profile (eight-letter SHU username) shortcut folder.
Please note: Steps 1-6 below require you to have a USB drive available.
On the keyboard, hold down the Windows flag key and hit "R" key.
(The Windows flag key will be located by the space bar and looks like the Microsoft logo).In the run box that pops up on your screen, type in "control" (without the quotes) and hit enter on the keyboard.
In the upper right-hand corner of the control panel, you will see “View by:" option with the dropdown selections, "Category", "Small icons" or "Large icons". Select either the "Small icons" or "Large icons" view.
Select the "BitLocker Drive Encryption" item on the control panel window.
On the BitLocker Drive Encryption screen, click the “Back up your recovery key” hyperlink.
If BitLocker is off on your machine, you may skip this process/continue to step 7.On the “How to you want to back up your recovery key?” screen, select “Save to a file”.
You will get an alert stating, “This location can’t be used … Choose a different location”.
Insert your flash drive and save the recovery key to it (typically your flash drive would be drive “D:/”Please note: you should have the file in a safe place, if you ever need to recover your hard drive you will need this key file.
Click on the “Start” menu icon in menu bar. Then, type in “Computer Management” in the search bar. Select “Computer Management” app from the search results.
On the Computer Management screen, select “Local Users and Groups”, then select “Users”.
Right-click on the “Administrator” name again and select “Properties” from the menu options.
On the Properties screen, ensure:
The “Password never expires” checkbox is checked.
The “Account is disabled” checkbox is NOT checked.
Once these selections are confirmed, click OK to proceed.
Back on the Computer Management screen, right-click on the “Administrator” name and select “Set Password” from the menu options.
You will receive an alert message about changing the password. Select the Proceed button.
Enter and re-enter a new password that aligns with the University’s password policy requirements (see below), then click OK.
Please note: The password being set can NOT be reset by the IT Service Desk. You must remember this password moving forward.
Password requirements:
At least 14 characters
A lowercase letter
An uppercase letter
A number
No parts of your username
If the password does not meet our domain password policy requirements, you will see an error message like this. Click OK to enter a new password that meets the password requirements criteria.
Sign out of your computer.
On the Windows login screen, select “Other user”.
In the username field, type “.\administrator” (note the <period> and <slash> before “administrator”). In the password field, enter the password that you just created. Your computer name will display in “Sign in to” field. Hit Enter to log in.
Click on the “Start” menu icon in menu bar. Then, type “access work or school” in the search bar. Select “Access work or school” system settings in the search results.
On the “Access work or school” screen, click the down arrow next to “Connected to the Seton Hall University’s Azure AD” and select the “Disconnect” button.
You will get a prompt asking, “Are you sure you want to remove this account?”, select the “Yes” button. Then, select the “Disconnect” button on the “Disconnect from the organization” screen.
You will be prompted to enter the username and password. Type “Administrator” (without quotes) in the username field and the password you created. Once entered, select OK.
A new pop-up window will appear, select the “Restart Now” now button.
When machine restarts, enter the password you created to log into the Administrator account.
Click on your “File Explorer” icon, then double click the “Local Disk” to access the C:\Users folder and look for your domain profile (eight-letter SHU username) folder.
Right-click your domain profile (eight-letter SHU username) folder, choose “Send to” > “Desktop (create shortcut)”.
Your domain profile folder shortcut is now available on your new desktop. Double click it and when prompted enter “Continue”.
You can access your previous data and files from this shortcut on your desktop.
Your computer has now been successfully removed from the SHU Azure/InTune network.
To use device in future:
A. continue to log in as “administrator” and use the password you created.
B. Your documents are stored in your domain profile (eight-letter SHU username) shortcut folder.
Select "Apple" menu → "System Preferences".
Within "System Preferences", select "Users & Groups".
Select "lock" icon in lower left hand corner and if prompted enter "admin" account credentials.
In lower right hand part of “Users & Groups”, there will be a “Network Account Server SHU” entry and an “Edit …” button. Select the “Edit …” button.
You will see that you are attached to the “SHU Active Directory Domain”, select the “minus” sign button.
You will be prompted to credentials to “Unbind from the Active Directory Domain”.
Enter your eight-character username, network password and then select “Unbind”
You will be prompted to again enter credentials to allow System Preferences to modify the system. Enter you local machine username and password, this can be different from your SHU-issued details.
Once device has been “unbound” from SHU.edu domain select the Apple Menu and choose reboot.
Upon reboot log in with local machine username and password.