Domain vs. Local Machine
The university that I attend gave us Lenovo thinkpads with Windows 7. At the time i didnt notice but now I see that I am not signing in to the local machine, rather I am signing in via their Domain. The login that i use is shu/stanicmi as opposed
to just signing in on my Windows 7 desktop. Is this a cause for concern?
August 3rd, 2010 4:54pm
What is the NetBIOS name of your domain? Is it shu?
To logon locaaly on the computer you should can specify the name of your computer and your user
name_of_computer\user_account
Free Windows Admin Tool Kit Click here and download it now
August 3rd, 2010 5:01pm
To log on manually I go to: 146611-R818CRW/stanicmi to log in (the default name for my laptop is 146611-R818CRW, however when i sign into that account it is empty. I can access the files and all of my programs but when I open those programs they behave
as if I am opening them for the first time. I am not sure what logging into the domain does and how it affects my machine and my privacy.
Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\stanicmi>ipconfig/all
Windows IP Configuration
Host Name . . . . . . . . . . . . : 146611-R818CRW
Primary Dns Suffix . . . . . . . : shu.edu
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : shu.edu
westell.com
Wireless LAN adapter Wireless Network Connection 3:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft Virtual WiFi Miniport Adapter #
2
Physical Address. . . . . . . . . : 00-24-D7-0E-BC-C9
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Wireless LAN adapter Wireless Network Connection:
Connection-specific DNS Suffix . : westell.com
Description . . . . . . . . . . . : Intel(R) Centrino(R) Ultimate-N 6300 AGN
Physical Address. . . . . . . . . : 00-24-D7-0E-BC-C8
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::edf6:a3f4:f6c0:cbe3%16(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.1.46(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Monday, 26 July, 2010 16:17:06
Lease Expires . . . . . . . . . . : Wednesday, 04 August, 2010 00:54:50
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DHCPv6 IAID . . . . . . . . . . . : 402662615
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-13-60-41-F5-00-26-2D-F3-D0-B6
DNS Servers . . . . . . . . . . . : 192.168.1.1
NetBIOS over Tcpip. . . . . . . . : Enabled
Ethernet adapter Local Area Connection:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : westell.com
Description . . . . . . . . . . . : Intel(R) 82577LM Gigabit Network Connecti
on
Physical Address. . . . . . . . . : 00-26-2D-F3-D0-B6
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter isatap.westell.com:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : westell.com
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter isatap.{7B4FDB94-F513-45FE-AD15-A3C36916CC6D}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Local Area Connection* 17:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:0:4137:9e76:18c0:3b73:3f57:fed1(Pref
erred)
Link-local IPv6 Address . . . . . : fe80::18c0:3b73:3f57:fed1%12(Preferred)
Default Gateway . . . . . . . . . : ::
NetBIOS over Tcpip. . . . . . . . : Disabled
C:\Users\stanicmi>
August 3rd, 2010 5:25pm
To log on manually I go to: 146611-R818CRW/stanicmi to log in (the default name for my laptop is 146611-R818CRW, however when i sign into that account it is empty. I can access the files and all of my programs but when I open those programs they
behave as if I am opening them for the first time. I am not sure what logging into the domain does and how it affects my machine and my privacy.
That's because as far as the machine is concerned you are opening them for the first time. You (local account) and You (Domain account) are two entirely different entities as far as Windows is concerned.
Logging on to the Domain gives you access to whatever Domain resources the school has allowed students to use; logging on locally you only have whatever resources are on your computer.
Privacy-wise, if your computer is a Domain member and it's connected and turned on then any Domain Admin can pretty much look at whatever they want on it and do whatever they want with it; you have no privacy. The only way around this is to disconnect
from the Domain - either un-join (you must be a Domain Admin to do this) or physically disconnect from the network. But then you're stuck with only local resources again, and in your situation that would probably mean no e-mail and no Internet while
at school.
If your computer isn't a Domain member, then you're pretty safe; others will only have access to what
you let them have access to. Just because you're using a Domain account to login doesn't necessarily mean your computer's a Domain member, it may be just the way the school set up the accounts.
Free Windows Admin Tool Kit Click here and download it now
August 3rd, 2010 5:38pm
Appearently your profile is no longer existing for your local account. Try to restart your computer and check if the problem is persisting.
August 3rd, 2010 6:01pm
To log on manually I go to: 146611-R818CRW/stanicmi to log in (the default name for my laptop is 146611-R818CRW, however when i sign into that account it is empty. I can access the files and all of my programs but when I open those programs they
behave as if I am opening them for the first time. I am not sure what logging into the domain does and how it affects my machine and my privacy.
That's because as far as the machine is concerned you are opening them for the first time. You (local account) and You (Domain account) are two entirely different entities as far as Windows is concerned.
Logging on to the Domain gives you access to whatever Domain resources the school has allowed students to use; logging on locally you only have whatever resources are on your computer.
Privacy-wise, if your computer is a Domain member and it's connected and turned on then any Domain Admin can pretty much look at whatever they want on it and do whatever they want with it; you have no privacy. The only way around this is to disconnect
from the Domain - either un-join (you must be a Domain Admin to do this) or physically disconnect from the network. But then you're stuck with only local resources again, and in your situation that would probably mean no e-mail and no Internet while
at school.
If your computer isn't a Domain member, then you're pretty safe; others will only have access to what
you let them have access to. Just because you're using a Domain account to login doesn't necessarily mean your computer's a Domain member, it may be just the way the school set up the accounts.
So the school has access over all computers and all data at any time? I know in the contract it states we are simply using the computers as a licensed user but upon graduation we sign the paperwork for ownership.
Free Windows Admin Tool Kit Click here and download it now
August 3rd, 2010 6:08pm
The school has access to all computers intergrated in your domain with the use of domain administrator accounts. If the remote access is not configured. The access will be possible only if you have physical access to the computers.
August 3rd, 2010 6:10pm
So the school has access over all computers and all data at any time? I know in the contract it states we are simply using the computers as a licensed user but upon graduation we sign the paperwork for ownership.
You can check this:
Start Orb->Control Panel->System. In the left pane click on
Advanced System Settings. Click on the Computer Name tab.
Under the computer's name it will either say Workgroup or
Domain. If it says Workgroup then the school has no control beyond what
you give them; if it says Domain you need to keep an eye out for Big Brother...
Free Windows Admin Tool Kit Click here and download it now
August 3rd, 2010 6:13pm
So the school has access over all computers and all data at any time? I know in the contract it states we are simply using the computers as a licensed user but upon graduation we sign the paperwork for ownership.
You can check this:
Start Orb->Control Panel->System . In the left pane click on
Advanced System Settings . Click on the Computer Name tab.
Under the computer's name it will either say Workgroup or
Domain . If it says Workgroup then the school has no control beyond what
you give them; if it says Domain you need to keep an eye out for Big Brother...
Bob, it is indeed a Domain. What would happen if I changed the domain to workgroup under the same computer name tab.
August 4th, 2010 2:19am
You really can't without going to a lot of trouble. There's two ways to do this:
#1. Only a Domain Admin can change the settings once the computer's been joined to a domain. So... become good friends with one of the school's IT people and have them change it.
#2. Reinstall Windows from scratch. I think the school might frown on this though, since according to you they own the machine until you graduate.
I doubt you'll have any problems though. As a former Network Admin for a small business college I can safely say that unless they suspect some illegal activity somewhere they really don't have enough time to go snooping through everyone's computer.
Besides, if you're on their domain they probably have Group Policies in place to keep your computer fully patched and the AV software up-to-date. Best to let things be, really.
Free Windows Admin Tool Kit Click here and download it now
August 4th, 2010 2:37am
You really can't without going to a lot of trouble. There's two ways to do this:
#1. Only a Domain Admin can change the settings once the computer's been joined to a domain. So... become good friends with one of the school's IT people and have them change it.
#2. Reinstall Windows from scratch. I think the school might frown on this though, since according to you they own the machine until you graduate.
I worked at the school IT department before and Im sure it would be possible. Regarding option 2, I cannot reinstall Windows 7 unless I buy myself a copy of Windows 7. Thanks for the help
August 4th, 2010 2:42am
The license agreement is listed here
http://www.shu.edu/offices/technology/pcss-junior-senior-terms-and-conditions.cfm and it does not mention the domain connection and the ability to observe and/or control the laptop.
Free Windows Admin Tool Kit Click here and download it now
August 4th, 2010 2:55am
I doubt if the ability to "observe and/or control" is the reason behind it; more like what I said before: the ability to push software patches and updates without interaction from the user.
August 4th, 2010 3:44am


