Upon graduation, students must remove their computers from the SHU network.
While this process will remove all of the restrictions on the laptop, it will not affect any of your data or pre-installed software.
When performing the removal steps, please ensure that you follow the instructions exactly as written. Failing to do so may result in loss of data and/or functionality on your device.
Please note:
This process is only valid for students who are graduating from the university.
This process only applies to SHU-issued Windows 10/11 and SHU-issued Apple Macintosh laptops.
Before beginning below domain removal processes please ensure that all data is backed up to your OneDrive for Business account.
Follow the steps below to remove your computer from the SHU network.
If you have a SHU-issued Apple Macintosh laptop you may skip this step.
First, determine if the device is joined to either the SHU.edu domain or Azure/InTune.
Depending on your connection type, follow the steps outlined below to:
a. Disconnect from shu.edu domain.
OR
b. Disconnect from Azure/InTune.
Click on the “Start” menu icon in menu bar. Then, type “access work or school” in the search bar. Select Access work or school system settings in the search results.
2. You will be taken to a screen that will identify how your computer is connect.
If the computer is joined to the shu.edu domain, you will see, "Connected to SHU AD domain".
If the computer is joined to Azure/InTune, you will see, "Connected to Seton Hall University’s Azure AD".
Click on the Start menu icon in menu bar. Then, type in “Computer Management” in the search bar. Select the Computer Management app from the search results.
On the Computer Management screen, select Local Users and Groups, then select Users.
Right-click on the Administrator name and select Set Password from the menu options.
You will receive an alert message about changing the password. Select the Proceed button.
Enter and re-enter a new password that aligns with the University’s password policy requirements (see below), then click OK.
Please note: The password being set can NOT be reset by the IT Service Desk. You must remember this password moving forward.
Password requirements:
At least 14 characters
A lowercase letter
An uppercase letter
a number
No parts of your username
If the password does not meet our domain password policy requirements, you will see the following error message. Click OK to enter a new password that meets the password requirements.
Once the new password has been set, select OK to return to the Computer Management screen.
Right-click on the Administrator name again, select Properties from the menu options.
If not already selected, check the Password never expires box. Then, click OK to exit the dialog.
Sign out of your computer.
On the Windows login screen, select Other user.
In the username field, type “.\administrator” (note the <period> and <slash> before administrator). In the password field, enter the password that you just created. Your computer name will display in the “Sign in to” field. Hit Enter to log in.
In the search box on your task manager bar, type “Control Panel System”. Then, click the control panel system search result to launch the program.
Select Advanced system settings.
Select the Computer Name tab, then select the Change button.
Under the “Member of” section of this screen, select the Workgroup radio button, then type “WORKGROUP” in the text field. Select OK once completed.
You will see a pop-up window reiterating that you will be responsible for remembering the local administrator password used to sign into the computer. Select OK.
You will be prompted to enter the name and password. Type Administrator in the username field and the password you created. Once entered, select OK.
A new pop-up window will appear, select OK to restart the computer and then the Restart Now button.
When the machine restarts, enter the password you created to log into the Administrator account.
Click on your File Explorer icon, then double click the Local Disk to access the C:\Users folder. Look for your domain profile (eight-letter SHU username) folder.
Right-click on your domain profile (eight-letter SHU username) folder, choose Send to → Desktop (create shortcut).
Your domain profile folder shortcut is now available on your new desktop. Double click it and when prompted click Continue.
You can access your previous data and files from this shortcut on your desktop.
You have successfully removed the machine from the domain.
To use device in future:
A. Continue to log in as administrator and use the password that you created.
B. Your documents are stored in your domain profile (eight-letter SHU username) shortcut folder.
Please note: Steps 1-6 below require you to have a USB drive available.
On the keyboard, hold down the Windows flag key and hit the "R" key.
(The Windows flag key will be located by the space bar and looks like the Microsoft logo).In the run box that pops up on your screen, type in "control" and click enter on the keyboard.
In the upper right-hand corner of the control panel, you will see the View by: option with the dropdown selections, Category, Small icons or Large icons. Select either the Small icons or Large icons view.
Select the BitLocker Drive Encryption item on the control panel window.
On the BitLocker Drive Encryption screen, click the Back up your recovery key hyperlink.
If BitLocker is off on your machine, you may skip this process/continue to step 7.On the How to you want to back up your recovery key? screen, select Save to a file.
You will get an alert stating, “This location can’t be used … Choose a different location”.
Insert your flash drive and save the recovery key to it (typically your flash drive would be drive “D:/”)Please note: you should have the file in a safe place, if you ever need to recover your hard drive you will need this key file.
Click on the Start menu. Then, type “Computer Management” in the search bar. Select the Computer Management app from the search results.
On the Computer Management screen, select Local Users and Groups, then select Users.
Right-click on the Administrator name again and select Properties from the menu options.
On the Properties screen, ensure:
The Password never expires box is checked.
The Account is disabled box is NOT checked.
Once these selections are confirmed, click OK to proceed.
Back on the Computer Management screen, right-click on the Administrator name and select Set Password from the menu options.
You will receive an alert message about changing the password. Select the Proceed button.
Enter and re-enter a new password that aligns with the University’s password policy requirements (see below), then click OK.
Please note: The password being set can NOT be reset by the IT Service Desk. You must remember this password moving forward.
Password requirements:
At least 14 characters
A lowercase letter
An uppercase letter
A number
No parts of your username
If the password does not meet our domain password policy requirements, you will see the following error message. Click OK to enter a new password that meets the password requirements.
Sign out of your computer.
On the Windows login screen, select Other user.
In the username field, type “.\administrator” (note the <period> and <slash> before “administrator”). In the password field, enter the password that you just created. Your computer name will display in Sign in to field. Hit Enter to log in.
Click on the Start menu. Then, type “access work or school” in the search bar. Select the Access work or school system settings in the search results.
On the Access work or school screen, click the down arrow next to Connected to the Seton Hall University’s Azure AD and select the Disconnect button.
You will get a prompt asking, “Are you sure you want to remove this account?”, select Yes. Then, select the Disconnect button on the Disconnect from the organization screen.
You will be prompted to enter the username and password. Type “Administrator” in the username field and the password you created. Once entered, select OK.
A new pop-up window will appear, select the Restart Now button.
When machine restarts, enter the password you created to log into the Administrator account.
Click on your File Explorer icon, then double click the Local Disk to access the C:\Users folder and look for your domain profile (eight-letter SHU username) folder.
Right-click your domain profile (eight-letter SHU username) folder, choose Send to → Desktop (create shortcut).
Your domain profile folder shortcut is now available on your new desktop. Double click it and when prompted enter Continue.
You can access your previous data and files from this shortcut on your desktop.
Your computer has now been successfully removed from the SHU Azure/InTune network.
To use device in future:
A. Continue to log in as administrator and use the password you created.
B. Your documents are stored in your domain profile (eight-letter SHU username) shortcut folder.
When removing the Seton Hall domain for a Mac, you must be a Seton Hall campus.
Select the Apple menu, then choose System Preferences.
Within System Preferences, select Users & Groups.
Click the lock icon to unlock it, then enter administrator name and password.
In the User & Groups panel, select the Edit button next to the Network Account Server: SHU field.
A new panel will appear displaying the active SHU Active Directory Domain connection, select the minus sign button.
You will be prompted to Unbind from the Active Directory Domain.
Enter your eight-character Seton Hall username and password, then select Unbind.
You’ll be prompted to enter credentials to allow System Preferences to modify the system. Enter your local machine username and password, this may be different from your SHU credentials.
Once device has been unbound from SHU.edu domain, select the Apple menu and choose reboot.
Upon reboot, log in with your local machine username and password.