Warning

 

Close
Confirm Action

Are you sure you wish to do this?

Cancel Confirm
AR15.COM
4/18/2009 10:08:07 AM EDT
I tried to get a computer on my network so I could do a virus scan.  After changing the workgroup I can't sign on.  Is there a way to change the workgroup back to the original setting using the registry?
4/18/2009 10:11:31 AM EDT
[#1]
Log in as admin and change the workgroup.




system properties, computer name tab
4/18/2009 10:22:30 AM EDT
[#2]
Quoted:
Log in as admin and change the workgroup.

system properties, computer name tab


I would do that but it's the guy's work computer.  He got a virus on it and wanted it removed without his company finding out about it.  

I don't know why except he seems afraid of the network admin.  His password doesn't work after I changed the workgroup.
4/18/2009 10:27:17 AM EDT
[#3]
you've lost me.  your doing a virus scan over a network.... i think thats your first problem  


your probably gonna have to use a xp password reset to get it to login again.   do a search on line for the tools
4/18/2009 10:49:07 AM EDT
[#4]
Quoted:
you've lost me.  your doing a virus scan over a network.... i think thats your first problem  


your probably gonna have to use a xp password reset to get it to login again.   do a search on line for the tools


Symantec didn't catch the virus and I didn't want to install anything on the computer
4/18/2009 1:49:40 PM EDT
[#5]



Quoted:

His password doesn't work after I changed the workgroup.


1) why did you change the work group?



2) did you pull him out of a domain?



 
4/18/2009 9:12:57 PM EDT
[#6]
Quoted:

2) did you pull him out of a domain?
 


This sounds like what might have happened.  A workgroup name change shouldn't have any effect on local users (forgive me if I'm wrong, it's been years since I've been on the user/admin side).  

As someone who manages admins, I'm kind of curious which of the two they'd be more pissed about; a virus or a user disjoining from the domain?  Both though?

4/18/2009 10:45:14 PM EDT
[#7]
the original infectee should stop cruising porn sites on his work machine.

that said, he needs to confess and have it cleared up at work.
4/18/2009 11:04:06 PM EDT
[#8]
If you removed him from his companies network domain, you would of had to have the password for a domain admin account... so if he has that, how does he not have the local admin password?

Well you have a few options...

1) Download something like Hiren's Boot CD from here. Then use it to reset the local administrator password, then get into the machine.

2) Remove the harddrive, hook it up to you machine and scan it.

3) Have him take it to his companies IT department and explain that that their AV solution failed in this case.

-d
4/19/2009 5:36:44 AM EDT
[#9]
If you have placed the computer in a workgroup, you will not be able to put the computer back on the domain, without a physical connection to the domain.

And if this is who I think it is, he should be afraid of me, I already cleaned his system once and found porn on there. Gave him a chance to fly straight.

He will probably lose his job over this.

He might have gotten just a lecture and written warning from HR, but now that he has had an outsider jack with his machine, I will push for a termination.

Idiots should not let amatuers try to fix their screwups..........

Thanks for the heads up, I will be double checking my Nebraska users computers tomorrow.
4/19/2009 5:45:12 AM EDT
[#10]
Quoted:
If you have placed the computer in a workgroup, you will not be able to put the computer back on the domain, without a physical connection to the domain.

And if this is who I think it is, he should be afraid of me, I already cleaned his system once and found porn on there. Gave him a chance to fly straight.

He will probably lose his job over this.

He might have gotten just a lecture and written warning from HR, but now that he has had an outsider jack with his machine, I will push for a termination.

Idiots should not let amatuers try to fix their screwups..........

Thanks for the heads up, I will be double checking my Nebraska users computers tomorrow.


freaking epic, if true
4/19/2009 6:07:34 AM EDT
[#11]
ouch
4/19/2009 8:02:06 AM EDT
[#12]
Quoted:
Quoted:
If you have placed the computer in a workgroup, you will not be able to put the computer back on the domain, without a physical connection to the domain.

And if this is who I think it is, he should be afraid of me, I already cleaned his system once and found porn on there. Gave him a chance to fly straight.

He will probably lose his job over this.

He might have gotten just a lecture and written warning from HR, but now that he has had an outsider jack with his machine, I will push for a termination.

Idiots should not let amatuers try to fix their screwups..........

Thanks for the heads up, I will be double checking my Nebraska users computers tomorrow.


freaking epic, if true


4/19/2009 11:34:19 AM EDT
[#13]
Nope, no porn.  I guess the network admin turned off the firewall because of connection issues.
4/19/2009 6:01:08 PM EDT
[#14]
Quoted:
Quoted:
Quoted:
If you have placed the computer in a workgroup, you will not be able to put the computer back on the domain, without a physical connection to the domain.

And if this is who I think it is, he should be afraid of me, I already cleaned his system once and found porn on there. Gave him a chance to fly straight.

He will probably lose his job over this.

He might have gotten just a lecture and written warning from HR, but now that he has had an outsider jack with his machine, I will push for a termination.

Idiots should not let amatuers try to fix their screwups..........

Thanks for the heads up, I will be double checking my Nebraska users computers tomorrow.


freaking epic, if true






Small chance of it being true, but I did have a user in NE with a porn issue, and I did clean it up with a stern warning. We do not use Norton, but we have a couple of people in one of our smaller companies that do, until I catch them.

The OP should be aware that many companies have legal notices and banners stating that unauthorized access is punishable by law. I would never touch a computer that belonged to another company unless I had written authorization from someone in authority.

4/19/2009 6:50:32 PM EDT
[#15]
I recently built a bootable virus scan USB stick using Puppy Linux 4.20.  I downloaded the .iso, installed it to a cd, then made a bootable usb stick with the ditstro on it (the utility is in the distro.)  I then installed XFprot (linux verison of F-Prot) on the usb stick, and updated it's definitions.  Once booted, I mounted the hard drive, and was able to scan the drive without installing anything..
4/24/2009 9:27:38 PM EDT
[#16]
I just remembered you can also click on Start>Run, then type in \\computer name, regardless of workgroup, and be able to see whatever is shared on that system.  it may prompt you for a username and password though.