How to remove computer from domain

Topic

New Reply

I have a Windows XP Pro computer that was part of a domain in a company that went bankrupt. I want to remove it from the Domain and have it function in A Workgroup. My immediate problem is that I can’t open a page in Internet Explorer and so cannot get Windows Updates. This is the message I get…

403: Forbidden

This error message is generated when the web server is trying to access a file that does not exist or has been configured incorrectly

Troubleshooting suggestions:

Ensure that you have a valid home page defined in your website directory (example: /htdocs/index.html, /htdocs/index.php). On Unix, this is case sensitive and must be all lower case.

In your Account Manager, under Hosting Tools, click to .Reset File Permissions..
If you need help resetting file permissions, click here: http://www.networksolutions.com/support/resetting-file-permissions/

Whatever that domain was it no longer exists. I really, really don’t want to reinstall everything. I did go into My Computer-Properties and change the name and place it in a Workgroup instead of a Domain but it didn’t help.

In your Account Manager, under Hosting Tools, click to .Reset File Permissions..

is this something local I can change or was it at the servers for the domain?

There must be a way.

Urge

Reply | Quote

Replies

You’ve already correctly removed the machine from the domain. There’s nothing else you need to do there. Its likely they were using WSUS (Windows Server Update Services) or SCCM (System Center Configuration Manger) to control how patches were deployed in that environment. So Windows Update might still be looking for those services. To see if this is the case, look for the following registry key: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsWindowsUpdateAU with a Reg_DWORD entry of UseWUServer. If there is a value in this key then delete it, reboot and run Microsoft Updates again. If there is no value, then there may be a 3rd party agent installed that’s controlling the distribution point that Windows Update is looking for. 3rd parties that push patches are companies like (but certainly not limited to) Shavlik, Solar Winds, & Logmein.

Can you get hold of the original media for the PC? You’d be a whole lot better off starting from scratch if you can. I suspect you may run into other issues that may cause you headaches.

Reply | Quote

If I try to go to Tools-Internet Options the computer won’t let me go there in IE but I can in Firefox. I looked in the registry but only got as far as HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWin dows there is no entry for WindowsUpdate let alone AU. The company this computer came from went bankrupt so no chance of any original media.

I just looked thru add/remove programs nand came across “akamai netsession interface service” could this possibly have something to do with this issue? Here is a blurb from their site describing it…What is the Akamai NetSession Interface?

The Akamai NetSession Interface is distributed networking software which greatly enhances the quality and speed of downloads and video streams you get from websites that support Akamai technology. The Akamai NetSession Interface handles the caching, reflecting and sending of files delivered to you through the Akamai network. The software is safe and secure, and does not contain any adware or spyware and never will. It can also be easily removed if you no longer wish to use it (see ‘How do I uninstall the Akamai NetSession Interface?’).

Urge

Reply | Quote

I doubt it.

The fact that you can’t go to Tools/Internet Options in IE is a tell tale sign that there have been some Group and/or IEAK (Internet Explorer Administration Kit) policies applied to the operating system. That’s most certainly going to bite you at some point.

As far as getting the original media, you might try contacting the manufacturer and see if you can purchase a restore disk. Or look on E-bay for one maybe.

Reply | Quote

Doc Brown wrote…

The fact that you can’t go to Tools/Internet Options in IE is a tell tale sign that there have been some Group and/or IEAK (Internet Explorer Administration Kit) policies applied to the operating system.

So, why can’t I download IEAK and reconfigure IE? I saw this on MS Technet…

If you are a corporate administrator, after you distribute your custom version of Internet Explorer that you built using Internet Explorer Administration Kit 7 (IEAK 7), you have several options for managing these settings:

[*] By storing a master .ins file on a server and downloading it each time you log on to the network, you can adjust user option settings on an ongoing basis. By directly editing logon scripts, you can manage and regularly update settings from a centralized server.
[*] For computers running Windows XP, you can use the Internet Explorer Maintenance extension in Group Policy (Gpedit.msc) to manage user settings.
[*] For computers running Windows Vista, you should use Administrative Templates in Group Policy to fully manage policies.
[*] For computers running Windows XP, you can view current policy settings by using Resultant Set of Policy (Rsop.msc).
[*] Using IEAK Profile Manager, you can administer configuration files. IEAK Profile Manager enables you to open any .ins file and make changes to settings.

I know nothing about this program but it appears to give you the ability to change settings. Am I mistaken about this? I have IE7, what if I upgraded to IE8, would that reset everything to a standard configuration?

Urge

Reply | Quote

Have you tried running gpedit.msc?

Joe

--Joe

Reply | Quote

You should be able to do it as follows.

[*]Hit Windows logo key + Pause/Break to take you to “System Properties”.
[*]Click the tab called “Computer Name” and then at the bottom, click the “Change” button.
[*]Give the computer a name and then click the radio button for ‘WORKGROUP“.
[*]Apply/OK

Reply | Quote

I tried gpedit.msc (thanks JoeP517) but didn’t find anything that was changed that would address my issue(it was largely “not configured”).
Xircal-I did that (it’s in my 1st post) but it made no difference. This computer (a Gateway) has IE7, would upgrading to IE8 maybe fix the problem?

Urge

Reply | Quote

I think IE has been configured via group policy. This changes values in the registry that limits what you can do in IE.
Close IE.
Remove this branch from the registry: HKEY_CURRENT_USERSoftwarePoliciesMicrosoftInternet Explorer
Restart IE and you should now be able to change things.
Set the proxy off, Tools > Internet Options > Connections > LAN Settings. Un-tick everything.

cheers, Paul

Reply | Quote

Remove this branch from the registry: HKEY_CURRENT_USERSoftwarePoliciesMicrosoftInte rnet Explorer

The only value in this branch is “nobrowseroptions” and it is set to 0. There is no Internet Options applet in Control Panel.

Urge

Reply | Quote

Try doing it this way.

[*]Open a comand prompt.
[*]Type: net computer \computername /del
[*]Hit Enter
[*]Type: Exit to close the command prompt.
[*]Reboot

So if your computer is called “Urge”, you’d type: net computer \urge /del

Then assign it to a workgroup.

Reply | Quote

I tried this and got this response: This command can be used only on a Windows Domain Controller. I am guessing this means the computer is thinking that it is not in a Domain.

Urge

Reply | Quote

Check the key HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftInternet ExplorerControl Panel for values described in this post.
http://www.pctools.com/guides/registry/detail/537/
Remove the entire “Internet Explorer” branch.

cheers, Paul

Reply | Quote

Try running this Fixit: http://support.microsoft.com/mats/Malware_Prevention/en-us
This is what it’s supposed to do:

[*]Checks Windows Firewall configuration and repairs as needed.
[*]Checks Windows policies to determine bad settings in the Windows Registry.
[*]Checks status of antivirus.
[*]Checks Internet Explorer privacy setting to determine how cookies are handled.
[*]Checks Windows Update to ensure computer is kept current and secure.
[*]Resets Remote Registry back to default to prevent remote modification.
[*]Resets User Account Control to default to prevent unauthorized changes to computer.
[*]Clears Internet Explorer history and cache.
[*]Checks if Internet Explorer is up to date.

You could also try resetting IE to default settings. The “Reset” button is located in IE Properties (right click the IE icon on your desktop) | Advanced tab.

This article may also help: Internet Explorer security zones registry entries for advanced users

Reply | Quote

Xircal, all the setting on Urge’s PC are valid. His problem is they prevent him changing the things he needs to change to make the PC work in a non-corporate environment.

cheers, Paul

Reply | Quote

Xircal, all the setting on Urge’s PC are valid. His problem is they prevent him changing the things he needs to change to make the PC work in a non-corporate environment.

cheers, Paul

What makes you think all his settings are valid?

Reply | Quote

The error message indicates IE has found the file but cannot open it. The most likely cause is the original environment used a special configuration which must be removed.

cheers, Paul

Reply | Quote

The error message indicates IE has found the file but cannot open it. The most likely cause is the original environment used a special configuration which must be removed.

cheers, Paul

Maybe, maybe not. But what you’ve suggested so far doesn’t appear to be working, so alternative routes should be explored. That’s my opinion anyway.

Urge: try the suggestion here: http://answers.yahoo.com/question/index?qid=20071201204249AAGO0WQ

Reply | Quote

I ran the MS fixit but it did nothing. I am unable to access IE Properties to reset IE to default.
This article may also help: Internet Explorer security zones registry entries for advanced users. I found nothing applicable.

Urge: try the suggestion here: http://answers.yahoo.com/question/in…1204249AAGO0WQ

You can do this no sweat but you must be a local administrator of that computer or have local admin priveledges. Instead of entering the domain logon credentials enter the local ones. If you aren’t a local administrator and there is no way to get the old password your only option would be to use an offline password editor /reset tool and reset the local admin password, reboot then remove it from the domain using the credentials you just reset. I promise this works, done it many times with systems puirchased from Ebay that were domain members.

I used a password editor to remove the existing password and then set up a new admin acct. When I first started working on this computer. System properties-Computer Name shows that I am in a workgroup.

Urge

Reply | Quote

Xircal, the machine is already removed from the domain – see the first post.

Urge, did you try the suggestion in post 13?

cheers, Paul

Reply | Quote

Urge, have you considered downloading windows updates with Firefox? They’re available as .ISO images. For example:

[*]May 2012 Security Release ISO Image
[*]April 2012 Security Release ISO Image
[*]March 2012 Security Release ISO Image

Each .ISO image contains the respective month’s complete security releases for all OS, so what you need to do is to extract each with WinRAR, discard the ones you don’t need i.e. those for Vista, Windows 7 etc., and then install the others.

At least it will bring your system up to date while you try to resolve the other issue with IE.

Reply | Quote

I looked at the link in post 13 but gpedit shows most options “not configured”. I went thru all the categories but didn’t see anything that would cause my issues. I read up on and downloaded IEAK 7 but it seems to me that anything it did would show up in gpedit.msc and since that appeared to be largely not configured I thought it would be a waste of time (am I wrong)? Xircal-that’s good to know, I’ve used MS download or downloaded updates from another computer so I knew I could get the patches I needed but this is another way-thanks.

Urge

Reply | Quote

With gpedit.msc did you look at both the Computer Configuration and the User Configuration?

Joe

--Joe

Reply | Quote

JoeP517 wrote…

With gpedit.msc did you look at both the Computer Configuration and the User Configuration?

I looked at everything.

Urge

Reply | Quote

Does the Computer Configuration section look like the attached?

31120-Capture

Joe

--Joe

Reply | Quote

31121-gpedit

With minor variations it looks almost the same.

Urge

Reply | Quote

Is the PC going through any proxy or firewall which requires a logon?

Joe

--Joe

Reply | Quote

JoeP517 wrote…

Is the PC going through any proxy or firewall which requires a logon?

No, a Verizon Fios router. What would that have to do with the internet options being blocked?

Urge

Reply | Quote

Because in your first post the “403 forbidden” error is usually bad permissions either from not being logged in to a site that requires a login or bad security settings.

Under the IE settings with gpedit.msc did you try changing any of the restrictions to disabled?

31123-Capture

Joe

--Joe

Reply | Quote

JoeP517 wrote…

Under the IE settings with gpedit.msc did you try changing any of the restrictions to disabled?

Yes, as a matter of fact, I changed a few things to disabled that seemed to be relevant. Not that it helped.

Urge

Reply | Quote

You seem to have exhausted the standard checks so that leaves 2 options.
1. The original owners loaded a program that controls the IE settings directly. I’ve not heard of this sort of program, but anything’s possible. Check Add/Remove Programs for any unusual programs. Remove Akamai while you are there.
2. You have a virus. Have you run a scan lately?

cheers, Paul

Reply | Quote

I have run a virus scan with Avast, and run both Superantispyware and Malwarebytes antispyware scans and turned up nothing. I don’t believe this computer went online very often. I uninstalled the Akamai program but it did nothing. I recognize all the programs installed on the computer that are in Add/Remove programs.This computer has both Office 2007 and Photoshop on it so I am reluctant to start over because I don’t otherwise own either one.

Urge

Reply | Quote

See if anything at How to reset Internet Explorer settings helps.

Joe

--Joe

Reply | Quote

Since I couldn’t access inetcpl.cpl it didn’t help. I just read on another forum @ cnet that Spybot might be able to undo it. Any thoughts on this? I think I will download it and see.

Urge

Reply | Quote

OK I went into C:WINDOWSie7 and double clicked on inetcpl.cpl and it opened internet properties!!!

Xircal wrote…

You could also try resetting IE to default settings. The “Reset” button is located in IE Properties (right click the IE icon on your desktop) | Advanced tab.

I don’t see anything here that would cause this problem. I placed a shortcut to this on the desktop. I changed my home page and I can use IE although I still can’t access internet options from IE or control panel but I can access it.

Urge

Reply | Quote

Take a look at this:

http://www.velocityreviews.com/forums/t200674-xp-pro-remove-domain-how.html

Most of it is people who don’t know what to do, but if you go to the bottom, djlawler advises using the Microsoft Sysprep tool.

It might damage your system, or it might just not fix what you need to fix, but it would be worth a try when you have gotten to the point where you are ready to reinstall XP anyway.

Reply | Quote

If the point of doing this is to remove this computer from a domain and place it in a workgroup then I think I have already done this. At least the computer is telling me it is in a workgroup. My only goal at this point is to get back access to internet options in IE and in the control panel. The internet properties page that opens when I clic inetcpl.cpl in C:WINDOWSie7 does not have the reset button that internet options does. It only has a restore defaults button which just changes the checked boxes on that page. It seems to me that if I could get that page back I could regain access to the internet options reset button which would probably fix my issue.

djlawler wrote…

I found a way to do this. Get Microsoft’s Sysprep tool. Run it – select ‘reseal’ and mini setup and let it reboot the computer. During the mini-setup that then runs – put the computer into a workgroup of your choosing. When you are done – all the software you have is still there (and drivers and patches). Some user setings may be altered – but it is better than reloading everything.

Will the Sysprep tool do this or just put me in a workgroup? What does “Some user setings may be altered” mean? I am going to read up on the Sysprep tool.

Urge

Reply | Quote

The normal way to disable IE settings is via group policy and that just changes some registry values. I think you said that Firefox works and that is consistent with group policy being applied to IE. You need to find the registry entries that control the IE settings and remove them, or re-install Windows from scratch.

cheers, Paul

Reply | Quote