Hi, I have a customer who brought in a lenovo laptop given to him by his former employer. It had a nasty virus that filled up his entire hard drive with garbage in the ie temp folder. I cleaned that up but there are several polices enforced by the employer admin acct that prevents control of windows updates, system restore, installing antivirus, etc. even though HIS acct is a admin acct. My question is I did see all these policies from my offline cleanup but did not touch them because I wasn't sure of the outcome, I usually remove policies left by viruses on machine I know have no owner special admin accts like this. Would it be safe for me to delete these policies? I already removed all other admin accts besides his as he requested.
Safe to remove policy's set my employer?
- Thread starter ell
- Start date
Markverhyden
Well-Known Member
- Reaction score
- 11,332
- Location
- Raleigh, NC
To be honest I'd be inclined to do a nuke and pave. But if that is not an option first thing I would do is make sure it is off of the domain and in WG mode. Then I would do a reset to defaults of the local group policies.
http://comtechsolution.blogspot.com/2012/07/how-to-reset-local-group-policy-objects.html
http://comtechsolution.blogspot.com/2012/07/how-to-reset-local-group-policy-objects.html
Thanks for your quick reply, I ran tweaking.com set to all defaults (I was a little nervous policies wouldn't let me create a restore point and I already had to mess with setting the system partition back to active after virus cleanup) that seemed to straighten policies out. He didn't want a nuke & pave because of Autocad and other programs he had. I've had tweaking.com totally mess up a win 8 machine so I was little hesitant.
ohio_grad_06
Well-Known Member
- Reaction score
- 581
Might want to make sure you create a backup image in case he ever has issues.
Yes I am doing that now, tweaking.com didn't do it as I thought, I went into the system info page and switched the domain to WORKGROUP it asked for the local admin password so I put in his and rebooted and was locked out, his password no longer worked. I booted to dart and used locksmith to remove/create the password and found just the admin, so I created a password and restarted, now admin is the only user on the workgroup domain, and not his, little scary. I went in and created another admin user and copied all his files to it then hid the admin acct. Anybody know if theres a way to switch the domain back to WORKGROUP without having to create another acct and copy the data over like I did? I'm sure I'll run across this situation again.
Last edited:
Similar threads
