Setting up a Non-Domain Computer

MIS Department Policy & Procedure 

Setting up a non-domain computer

In general, all computers should be added to the domain and the Windows Setup Process | New Computer KB should be followed when doing so. However, in rare cases with approval from the MIS Director and the respective department the device would go to, we might leave a computer off of the domain, and not allow it to access the network.

1. You will still follow the Windows Setup Process KB, https://rochesterhills.freshdesk.com/a/solutions/articles/150000201822/edit
2. No need to go through the User Setup steps, since we won’t be setting this up for a RH user. An example of when a non-domain computer might be approved is the Museum Volunteers, who won’t be accessing anything with a Rochester Hills account or email.
   1. *Optional* Once the computer has all the core software and updates pushed from PDQ locate the local admin password in LAPS. Login as local admin to the computer.
   2. *Optional* You can do this from the windows login screen by selecting “Other User”-> and typing in “.\mis”-> followed by the password for the local admin account. Once confirming that it works
3. Type in workgroup or domain into the windows search bar, select “Show which domain your computer is on”
   1. 
   3. Towards the bottom, select domain or workgroup
   4. 
   5. Select Change next to “To rename this computer or change its domain…”
   6. 
   7. Click on the circle for workgroup, and insert name “Default” or any generic name.
   8. 
   9. Select Ok on the following prompt.
   10. Once complete, enter admin creds.
4. In either order, uninstall Duo Multifactor from the programs and applications. Then reboot the computer.
   1. Once the computer is reboot, you will need to sign in as local admin, and create a profile for the user who will be accessing this non-domain device.
5. Open Settings
   1. Select Accounts
   2. Select Other Users
   3. Select Add Account
   4. Select I don’t have this persons sign-in information
   5. Select add a user without a Microsoft account
   6. Enter account information (in our case, we used the name Volunteer and set a static password)