Remove Computer from Seton Hall Domain
- Milan Stanic
- Christine Sandella
- Kenneth Smith
Graduating students are required to remove their computers from the Seton Hall University (SHU) network. This process will lift all SHU-specific restrictions on the laptop while ensuring that your personal data and any pre-installed software remain unaffected.
It is crucial to follow the removal instructions exactly as written. Failing to do so could result in loss of data or functionality on your device. If you encounter any difficulties, please contact the Technology Service Desk for assistance.
Important Notes:
This process is only valid for students who are graduating from the university.
This process only applies to SHU-issued Windows 10/11 and SHU-issued Apple Macintosh laptops.
Before beginning below domain removal processes, please ensure that all data is backed up to your OneDrive for Business account.
Steps to Remove Your Computer from the SHU Network
If you have a SHU-issued Apple Macintosh laptop, you can skip this step.
To begin, determine if your device is connected to either the SHU.edu domain or Entra ID (formerly known as Azure) via InTune.
Once you identify your connection type, follow the appropriate steps:
Disconnect from the SHU.edu domain
Disconnect from Entra ID/InTune
Refer to the detailed instructions below for the specific steps based on your connection type.
Click the Start menu icon in the taskbar. Then, type "access work or school" in the search bar and select Access work or school system settings from the search results.
You will be directed to a screen that shows how your computer is connected.
If the computer is joined to the SHU.edu domain, you will see: "Connected to SHU AD domain."
If the computer is joined to Entra ID/InTune, you will see: "Connected to Seton Hall University’s Entra ID."
Open Computer Management
Click the Start menu icon in the taskbar. Type "Computer Management" in the search bar and select the Computer Management app from the search results.
In the Computer Management screen, select Local Users and Groups, then Users.
Set Administrator Properties
Right-click on the Administrator name and select Properties.
Check the Password never expires box, if it is not already selected. Ensure that Account is disabled box is NOT checked.
Click OK to save changes and exit.
Set the Administrator Password
This password cannot be reset by the IT Service Desk. Remember it for future use.
Back on the Computer Management screen, right-click on the Administrator name and select Set Password from the menu.
A warning message will appear. Click Proceed.
Enter and confirm a new password that meets the following requirements.
At least 14 characters
Includes an uppercase letter, a lowercase letter, and a number
Does not include parts of your username
Click OK.
If the password does not meet the requirements, an error message will appear. Click OK to retry.
Log in as Administrator
Sign out of your computer
On the Windows login screen, select Other user.
In the Username field, type
.\administrator(include the period and slash).In the Password field, enter the password you just created.
Ensure your computer name appears in the Sign in to field, then press Enter to log in.
Change Domain Membership
Open the Control Panel System by typing "Control Panel System" in the search bar and selecting the result.
Select Advanced system settings.
In the Computer Name tab, click the Change button.
Under Member of, select the Workgroup radio button and type
WORKGROUPin the text field.
Confirm and Restart
A pop-up window will appear reminding you to remember the local administrator password. Click OK.
Enter the Administrator username and the password you created, then click OK.
A confirmation window will appear. Click OK, then select Restart Now.
Access Your Domain Profile
After the restart, log in to the Administrator account using the password you created.
Open File Explorer and double-click Local Disk (C:) to access the
C:\Usersfolder.Locate your domain profile folder (your eight-letter SHU username).
Right-click the folder, select Send to → Desktop (create shortcut).
Your domain profile folder shortcut will now be on your desktop. Double-click the shortcut to access your files. If prompted, click Continue.
Using the Device Moving Forward
Option A: Continue to log in as the Administrator using the password you created.
Option B: Access your documents through the domain profile shortcut folder on your desktop.
Steps to Back Up Your BitLocker Recovery Key
Steps 1-7 below require you to have a USB drive available.
Press the Windows flag key (located near the spacebar, resembling the Microsoft logo) and the "R" key simultaneously.
In the Run box that appears, type "control" and press Enter.
In the upper-right corner of the Control Panel, locate the View by: option. Select either Small icons or Large icons from the dropdown menu.
In the Control Panel, click BitLocker Drive Encryption.
On the BitLocker Drive Encryption screen, select the Back up your recovery key hyperlink.
Note: If BitLocker is turned off, you can skip this process and proceed to Step 7.On the How do you want to back up your recovery key? screen, select Save to a file.
If you see an alert stating, “This location can’t be used... Choose a different location,” insert your USB drive (usually labeled as drive "D:/") and save the recovery key to it.
Open Computer Management
Click the Start menu icon in the taskbar. Type "Computer Management" in the search bar and select the Computer Management app from the search results.
In the Computer Management screen, select Local Users and Groups, then Users.
Set Administrator Properties
Right-click on the Administrator name and select Properties.
Check the Password never expires box, if it is not already selected. Ensure that Account is disabled box is NOT checked.
Click OK to save changes and exit.
Set the Administrator Password
This password cannot be reset by the IT Service Desk. Remember it for future use.
Back on the Computer Management screen, right-click on the Administrator name and select Set Password from the menu.
A warning message will appear. Click Proceed.
Enter and confirm a new password that meets the following requirements.
At least 14 characters
Includes an uppercase letter, a lowercase letter, and a number
Does not include parts of your username
Click OK.
If the password does not meet the requirements, an error message will appear. Click OK to retry.
Log in as Administrator
Sign out of your computer
On the Windows login screen, select Other user.
In the Username field, type
.\administrator(include the period and slash).In the Password field, enter the password you just created.
Ensure your computer name appears in the Sign in to field, then press Enter to log in.
Click the Start menu. Type "access work or school" in the search bar and select Access work or school system settings from the search results.
On the Access work or school screen, click the down arrow next to Connected by <shortname>@shu.edu and select the Disconnect button.
When prompted with “Are you sure you want to remove this account?”, click Yes.
On the Disconnect from the organization screen, select Disconnect again.
You will be prompted to authenticate. In the Username field, type
Administrator. In the Password field, enter the password you previously created.Click OK to complete the process.
Confirm and Restart
A confirmation window will appear. Click OK, then select Restart Now.
Access Your Domain Profile
After the restart, log in to the Administrator account using the password you created.
Open File Explorer and double-click Local Disk (C:) to access the
C:\Usersfolder.Locate your domain profile folder (your eight-letter SHU username).
Right-click the folder, select Send to → Desktop (create shortcut).
Your domain profile folder shortcut will now be on your desktop. Double-click the shortcut to access your files. If prompted, click Continue.
Uninstall CrowdStrike Windows Sensor
Click Start, then select Settings.
Navigate to Apps and choose Installed apps.
Locate CrowdStrike Windows Sensor in the list of installed apps.
Select it, then click Uninstall.
Follow the on-screen prompts to complete the removal process.
If you receive a security alert in the bottom-right corner of your screen during this process, you may safely disregard it.
Using the Device Moving Forward
Option A: Continue to log in as the Administrator using the password you created.
Option B: Access your documents through the domain profile shortcut folder on your desktop.
To remove your Mac from the Seton Hall domain, you must be on a Seton Hall campus.
Select the Apple menu, then choose System Preferences.
Within System Preferences, select Users & Groups.
Click the lock icon in the bottom-left corner to unlock settings, then enter your administrator username and password.
In the Users & Groups panel, locate the Network Account Server: SHU field. Click the Edit button next to it.
In the panel displaying the active SHU Active Directory Domain connection, select the minus (-) button.
When prompted to Unbind from the Active Directory Domain, enter your eight-character Seton Hall username and password, then click Unbind.
You will be prompted to enter credentials to allow System Preferences to modify the system.
Enter your local machine username and password (this may differ from your SHU credentials).Once the device has been unbound from the SHU.edu domain, select the Apple menu and choose Reboot.
After rebooting, log in using your local machine username and password.
