I have a PC on our network that has recently been removed
from the domain. When the machine was attached to the
domain it was subject to a Software Restriction policy
(SRP) which was set through a GPO on the Domain.

The problem I have is that even though I have removed the
Computer from the domain, the SRP is still effective and
preventing me form opening certain software.

Does anyone know how to remove this Policy, without
formatting and re-stalling XP?

Many Thanks - Mike.

You can try removing it locally via GPEDIT.MSC

--
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Associate Expert
ExpertZone - http://www.microsoft.com/windowsxp/expertzone
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"mike Dower" <(E-Mail Removed)> wrote in message
news:08cf01c3ae95$b2c30030$(E-Mail Removed)...
> I have a PC on our network that has recently been removed
> from the domain. When the machine was attached to the
> domain it was subject to a Software Restriction policy
> (SRP) which was set through a GPO on the Domain.
>
> The problem I have is that even though I have removed the
> Computer from the domain, the SRP is still effective and
> preventing me form opening certain software.
>
> Does anyone know how to remove this Policy, without
> formatting and re-stalling XP?
>
> Many Thanks - Mike.

I've tried that already.

When I open gpedit.msc it opens the Local Computer
Policy, and there is no Software Restriction Policy
defined within this!!


>-----Original Message-----
>You can try removing it locally via GPEDIT.MSC
>
>--
>Doug Knox, MS-MVP Windows XP/ Windows Smart Display
>Win 95/98/Me/XP Tweaks and Fixes
>http://www.dougknox.com
>--------------------------------
>Associate Expert
>ExpertZone -
http://www.microsoft.com/windowsxp/expertzone
>--------------------------------
>Please reply only to the newsgroup so all may benefit.
>Unsolicited e-mail is not answered.
>
>"mike Dower" <(E-Mail Removed)> wrote
in message
>news:08cf01c3ae95$b2c30030$(E-Mail Removed)...
>> I have a PC on our network that has recently been
removed
>> from the domain. When the machine was attached to the
>> domain it was subject to a Software Restriction policy
>> (SRP) which was set through a GPO on the Domain.
>>
>> The problem I have is that even though I have removed
the
>> Computer from the domain, the SRP is still effective
and
>> preventing me form opening certain software.
>>
>> Does anyone know how to remove this Policy, without
>> formatting and re-stalling XP?
>>
>> Many Thanks - Mike.
>
>
>.
>

In article <08cf01c3ae95$b2c30030$(E-Mail Removed)>, in the
microsoft.public.windowsxp.security_admin news group, mike Dower
<(E-Mail Removed)> says...

> The problem I have is that even though I have removed the
> Computer from the domain, the SRP is still effective and
> preventing me form opening certain software.
>
> Does anyone know how to remove this Policy, without
> formatting and re-stalling XP?
>
>

You'll need to rejoin it to the domain, then configure a GPO that
disables (disables, not "not configured") SRP for this computer. Make
sure the policy has been applied, and then remove it from the domain
again. Failing that, you'll need to reinstall.

--
Paul Adare
Moral indignation is jealousy with a halo.
H. G. Wells, The Wife of Sir Isaac Harman

When you say set a new GPO to Disable Software
Restriction Policy, do you mean set the Default level
to 'Unrestricted' on the new Software Restricion Policy?

Mike.
>-----Original Message-----
>In article <08cf01c3ae95$b2c30030$(E-Mail Removed)>, in
the
>microsoft.public.windowsxp.security_admin news group,
mike Dower
><(E-Mail Removed)> says...
>
>> The problem I have is that even though I have removed
the
>> Computer from the domain, the SRP is still effective
and
>> preventing me form opening certain software.
>>
>> Does anyone know how to remove this Policy, without
>> formatting and re-stalling XP?
>>
>>
>
>You'll need to rejoin it to the domain, then configure a
GPO that
>disables (disables, not "not configured") SRP for this
computer. Make
>sure the policy has been applied, and then remove it
from the domain
>again. Failing that, you'll need to reinstall.
>
>--
>Paul Adare
>Moral indignation is jealousy with a halo.
>H. G. Wells, The Wife of Sir Isaac Harman
>.
>

In article <185601c3aeb6$be1cb860$(E-Mail Removed)>, in the
microsoft.public.windowsxp.security_admin news group, Mike Dower
<(E-Mail Removed)> says...

> When you say set a new GPO to Disable Software
> Restriction Policy, do you mean set the Default level
> to 'Unrestricted' on the new Software Restricion Policy?
>

Yeah, you need to reverse whatever changes you've made via GP, and then
remove the system from the domain.

Note that there are other security related settings in GP that "tattoo"
the registry as well. You may be better of reinstalling the OS.

--
Paul Adare
Moral indignation is jealousy with a halo.
H. G. Wells, The Wife of Sir Isaac Harman

This may or may not work but try to configure a policy - any obscure policy
such as a hash rule for an executable and then reboot the computer to see if
it helps. Make sure that the computer knows it is no longer a member of a
domain and belongs to a workgroup. --- Steve

<(E-Mail Removed)> wrote in message
news:0b7101c3ae9e$af84af00$(E-Mail Removed)...
> I've tried that already.
>
> When I open gpedit.msc it opens the Local Computer
> Policy, and there is no Software Restriction Policy
> defined within this!!
>
>
> >-----Original Message-----
> >You can try removing it locally via GPEDIT.MSC
> >
> >--
> >Doug Knox, MS-MVP Windows XP/ Windows Smart Display
> >Win 95/98/Me/XP Tweaks and Fixes
> >http://www.dougknox.com
> >--------------------------------
> >Associate Expert
> >ExpertZone -
> http://www.microsoft.com/windowsxp/expertzone
> >--------------------------------
> >Please reply only to the newsgroup so all may benefit.
> >Unsolicited e-mail is not answered.
> >
> >"mike Dower" <(E-Mail Removed)> wrote
> in message
> >news:08cf01c3ae95$b2c30030$(E-Mail Removed)...
> >> I have a PC on our network that has recently been
> removed
> >> from the domain. When the machine was attached to the
> >> domain it was subject to a Software Restriction policy
> >> (SRP) which was set through a GPO on the Domain.
> >>
> >> The problem I have is that even though I have removed
> the
> >> Computer from the domain, the SRP is still effective
> and
> >> preventing me form opening certain software.
> >>
> >> Does anyone know how to remove this Policy, without
> >> formatting and re-stalling XP?
> >>
> >> Many Thanks - Mike.
> >
> >
> >.
> >

In article <roNub.245559$HS4.2175886@attbi_s01>, in the
microsoft.public.windowsxp.security_admin news group, Steven L Umbach
<(E-Mail Removed)> says...

> This may or may not work but try to configure a policy - any obscure policy
> such as a hash rule for an executable and then reboot the computer to see if
> it helps. Make sure that the computer knows it is no longer a member of a
> domain and belongs to a workgroup. --- Steve

You can't use software restriction policies unless the box is a domain
member.

>
> <(E-Mail Removed)> wrote in message
> news:0b7101c3ae9e$af84af00$(E-Mail Removed)...
> > I've tried that already.
> >
> > When I open gpedit.msc it opens the Local Computer
> > Policy, and there is no Software Restriction Policy
> > defined within this!!
>

--
Paul Adare
Moral indignation is jealousy with a halo.
H. G. Wells, The Wife of Sir Isaac Harman

Hi Paul. I have been able to successfuly use it via Local Security
Policy/machine configuration on a stand alone XP Pro machine and use it to
restrict all users but the administrators via the enforcement rule. ---
Steve

"Paul Adare" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> In article <roNub.245559$HS4.2175886@attbi_s01>, in the
> microsoft.public.windowsxp.security_admin news group, Steven L Umbach
> <(E-Mail Removed)> says...
>
> > This may or may not work but try to configure a policy - any obscure
policy
> > such as a hash rule for an executable and then reboot the computer to
see if
> > it helps. Make sure that the computer knows it is no longer a member of
a
> > domain and belongs to a workgroup. --- Steve
>
> You can't use software restriction policies unless the box is a domain
> member.
>
> >
> > <(E-Mail Removed)> wrote in message
> > news:0b7101c3ae9e$af84af00$(E-Mail Removed)...
> > > I've tried that already.
> > >
> > > When I open gpedit.msc it opens the Local Computer
> > > Policy, and there is no Software Restriction Policy
> > > defined within this!!
> >
>
> --
> Paul Adare
> Moral indignation is jealousy with a halo.
> H. G. Wells, The Wife of Sir Isaac Harman

In article <OXQub.247073$HS4.2188027@attbi_s01>, in the
microsoft.public.windowsxp.security_admin news group, Steven L Umbach
<(E-Mail Removed)> says...

> Hi Paul. I have been able to successfuly use it via Local Security
> Policy/machine configuration on a stand alone XP Pro machine and use it to
> restrict all users but the administrators via the enforcement rule. ---
> Steve
>

Doh! Sorry, brain fart. Thanks for being gentle Steven. :-)
--
Paul Adare
Moral indignation is jealousy with a halo.
H. G. Wells, The Wife of Sir Isaac Harman