Settings are managed by your administrator - PC was part of a Domain

boweasel · 01 May 2017

This Dell Optiflex 390 W7 Pro 64 SP1 tower was not used for years, but now the owners want to use it. It was once part of a domain and NOBODY had a clue about any of the passwords. I used a Dell disk to get into the command prompt and reset the Administrator pswd. Then I logged onto that account and reset all the other account pswds. Then I removed the computer from the domain.

The problem is that the system needs to be updated and I'm getting the following screen no matter what admin account I sign on with.

I have gone through the options in the tutorial Windows Update - Enable or Disable Access - Windows 7 Help Forums but they've made no difference.

I put this in the general section since I'm sure this affects more than just the Windows Updates.

Layback Bear · 01 May 2017

Because this computer was on a domain, let see what kind of license it has from Microsoft.

It might be looking for the domain server for updating.

Please complete this tutorial by Brink.

Windows Genuine and Activation Issue Posting Instructions - Windows 7 Help Forums

Jack

Jack

Callender · 01 May 2017

Run netplwiz and check users' group membership.

Also see: Windows Update options grayed out - is this new? - Windows 7 Help Forums

boweasel · 01 May 2017

Layback Bear said:

Because this computer was on a domain, let see what kind of license it has from Microsoft.

It might be looking for the domain server for updating.

Please complete this tutorial by Brink.

Windows Genuine and Activation Issue Posting Instructions - Windows 7 Help Forums

Jack

Jack

Here is the report

Code:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
Windows Product ID: 00371-OEM-8992671-00524
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {C30448B5-1256-4ECB-8CC6-7691DB453F57}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_ldr.170307-1800
TTS Error: 
Validation Diagnostic: 
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{C30448B5-1256-4ECB-8CC6-7691DB453F57}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-207602415-1083488805-2474201603</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>OptiPlex 390</Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A03</Version><SMBIOSVersion major="2" minor="6"/><Date>20111026000000.000000+000</Date></BIOS><HWID>4C013B07018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>CBX3   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, Professional edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: 50e329f7-a5fa-46b2-85fd-f224e5da7764
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00371-00178-926-700524-02-1033-7601.0000-0302012
Installation ID: 008920650440198706723514208682873522352103793011387742
Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338
Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339
Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340
Partial Product Key: 733WD
License Status: Licensed
Remaining Windows rearm count: 2
Trusted time: 5/1/2017 9:27:36 PM

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 4:29:2017 16:56
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: NAAAAAEABAABAAEAAAACAAAAAgABAAEA6GEsexp2fBRK3WI0EDQufHoEmohyI7JawAoucw==

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information: 
  ACPI Table Name	OEMID Value	OEMTableID Value
  APIC			DELL  		CBX3   
  FACP			DELL  		CBX3   
  HPET			A M I 		 PCHHPET
  BOOT			DELL  		CBX3    
  MCFG			DELL  		SNDYBRDG
  SSDT			PmRef		Cpu0Ist
  SSDT			PmRef		Cpu0Ist
  DMAR			INTEL 		SNB 
  SLIC			DELL  		CBX3

boweasel · 01 May 2017

Callender said:

Run netplwiz and check users' group membership.

Also see: Windows Update options grayed out - is this new? - Windows 7 Help Forums

Results of netplwiz:

townsbg · 01 May 2017

windows 7 - Removing a computer from the domain - Server Fault

It is important that you have at least one account that is a local administrator and I would stop using the accounts that are domain accounts. You cannot perform these steps if you don't have access to an admin account. You can check the accounts using computer management. administrator is probably local but without a peek at users under computer management I couldn't tell you for sure. Right click on computer and click on manage. Expand local user's and then click on users. Post a screenshot. After completing the steps in the article right click on command prompt and select run as administrator. Type in gpupdate and hit enter.

If the group policy update was successful you will see this.

C:\Windows\system32>gpupdate
Updating Policy...

User Policy update has completed successfully.
Computer Policy update has completed successfully.

Finally reboot the computer one more time.

boweasel · 02 May 2017

townsbg said:

windows 7 - Removing a computer from the domain - Server Fault

It is important that you have at least one account that is a local administrator and I would stop using the accounts that are domain accounts. You cannot perform these steps if you don't have access to an admin account. You can check the accounts using computer management. administrator is probably local but without a peek at users under computer management I couldn't tell you for sure. Right click on computer and click on manage. Expand local user's and then click on users. Post a screenshot. After completing the steps in the article right click on command prompt and select run as administrator. Type in gpupdate and hit enter.

If the group policy update was successful you will see this.

Finally reboot the computer one more time.

Thanks for the reply. I believe I'd already successfully removed the PC from the domain. Included is a screen shot of the System screen along with the results of the 2 other suggestions. did not read the article since it would seem that the computer is no longer part of any domain, unless I'm missing something.

I did reboot after running gpupdate as an admin just to see if that command itself did anything. It did not - I get the same screen as in post #1.

Callender · 02 May 2017

Please post contents of the following registry keys including sub-keys so that we can check them:

HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate

HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU

If the AU subkey exists it's likely to be the problem as mentioned in the link in Post #3

Note

NOTE: For 64-bit editions of Windows you also need to check following Registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows

Here is mine for comparison. There are no AU subkeys.

Code:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"DisableOSUpgrade"=dword:00000001

Code:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows\WindowsUpdate]
"DisableOSUpgrade"=dword:00000001

Also read:
Configure Clients in a Non Active Directory Environment

boweasel · 02 May 2017

Callender said:

Please post contents of the following registry keys including sub-keys so that we can check them:

HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate

HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU

If the AU subkey exists it's likely to be the problem as mentioned in the link in Post #3

Note

NOTE: For 64-bit editions of Windows you also need to check following Registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows

Here is mine for comparison. There are no AU subkeys.

Code:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"DisableOSUpgrade"=dword:00000001

Code:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows\WindowsUpdate]
"DisableOSUpgrade"=dword:00000001

Also read:
Configure Clients in a Non Active Directory Environment

This seems to be the problem....

townsbg · 02 May 2017

I was hoping that command would force windows to pull from local group policy rather than domain policy. From start menu type in gpedit.msc to open group policy editor. In the window that opens browse to computer configuration > administrative templates > Windows components > Windows update. Try setting all of those settings to not configured. Do the same thing for user configuration > administrative templates > Windows components > Windows update.