Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

It is a win7 ultimate x64 machine. The machine was in a domain where it got those group policy settings. Now it has left the domain but it still receives the settings from the group policy. For example, the power options. I set a certain power option but soon it will be reset to another power option which is endorsed by the domain.

Is there a way to remove the settings?

share|improve this question
    

5 Answers 5

Open Regedit.

Backup your registry.

Delete the HKLM\Software\Policies\Microsoft Key (looks like a folder).

Delete the HKCU\Software\Policies\Microsoft Key.

Delete the HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects Key.

Delete the HKCU\Software\Microsoft\Windows\CurrentVersion\Policiess Key.

Exit the registry and restart.

Note: HKLM = HKEY_LOCAL_MACHINE & HKCU = HKEY_CURRENT_USER

Note 2: The registry is and can be a dangerous place.

share|improve this answer

The system was PHYSICALLY removed from the domain? Has it been removed via the OS yet? Basically, does the system know it's not on the domain? If you are still logging into an account that was used while it was on the domain, chances are it hasnt been removed from the domain. Group policy will apply if it is a domain account, regardless of physical connection to the network that the domain resides on. Try logging in as the local administrator and see if that alleviates the problem. If it does, you need to disjoin the machine from the domain through the computer name tab in the advanced system settings and stop using the domain level account to log in.

If it is physically off the domain, and you ARE using a local account to log on, and it still carries the group policy settings, not only would i be very surprised, but something is wrong.

share|improve this answer
1  
Thanks for replying. To answer your question - yes it's physically removed from the domain and now joins a workgroup. I am using a local admin account to log in. And yes, domain settings still apply. –  Kay Jan 18 '12 at 22:46

Thanks for replying. To answer your question - yes it's physically removed from the domain and now joins a workgroup. I am using a local admin account to log in. And yes, domain settings still apply.

If it is physically off the domain, and you ARE using a local account to log on, and it still carries the group policy settings, not only would i be very surprised, but something is wrong.

Indeed. It's a stuck policy. Fortunately, there is a rather ingenious way to fix this problem. Unfortunately, it's not common knowledge. Hopefully this answer will get around to enough sysadmins to fix that.

By the way, this works on all versions of Windows.

This solution is dependent upon the machine-in-question being dis-joined from the domain. If it is NOT dis-joined from the domain via the OS, then this will NOT work.

  1. After the machine is dis-joined from the DC (Domain Controller), login using the local (machine) administrator account.

  2. Go to Start>Run, and type 'cmd' (without the quotes) and press Enter

  3. Type 'gpupdate /force /boot' and press Enter.

  4. Once it's complete, reboot. The old group policy is gone.

Basically, how this works is it (since it gets no policy when you run the command), it applies an empty policy, which effectively removes the stuck policy once and for all.

If you run into problems, 'gpresult /H GPReport.html', if you see the DC or evidence that it pulled a policy; separate your computer from the network that's running on the DC, and plug the machine into a separate network.

(no internet connection is required for this solution, but the link needs to be up, and it needs to have an IP address)

share|improve this answer

I dont like Paperlanter's answer, I know what he is getting at, but hes not saying it correctly

Was the machine dis-joined from the domain from the domain? Either via Active Directory or from the machine's System Properties/Computer Name dialog?

If not, the group policy will still apply. This is true whether you are using the local admin account or not.

share|improve this answer

I have seen this but on my domain. I have computers that I've moved out of OU's that still keep OU's GPO's. I've moved them back into the OU and removed the check from Enforce and Link Enable. This helped remove the policy. I have noticed if you delete the policy from GPM they will never go away. You have to do it by the right steps or re-image the computer to remove the policies.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.