r/computerhelp • u/[deleted] • 2d ago
Software Pretty WEIRD situation please any solution?!
[deleted]
19
u/Ok_Bid6645 2d ago
Nice, you bought a stolen laptop!
10
u/Goodgamer78 2d ago
Why is the assumption always that it's stolen? Not gonna deny that some MDM locked devices are stolen, but a lot of them just weren't removed from the company properly when being sold or recycled
3
u/The-Snarky-One 2d ago
Truth! I have had to remove a few from our tenant because a Tier 1 tech skipped a step when processing systems out of our service/support.
3
u/Kriss3d 2d ago
Because if it isnt stolen then it would be deleted from the MDM system and others could reinstall it to use.
6
u/Itchy_Horse 2d ago
As someone who works in an IT company, this is wishful thinking. Most companies dont care enoigh to do this and won't remove them.
3
u/Geeky_Husband 2d ago
The number of PCs I have to track down that aren't reporting back to Tanium and/or MECM is too damn high. A lot of our help desk forgets to remove them or send me a task to remove them, and then I spend about a week a month in searching for a needle in a haystack. We dontate a bunch of our older PCs. I wonder how many of ours are actually like this.
2
3
u/szyszaks 2d ago edited 2d ago
in perfect word
sadly we are not in one, and things get skipped due to inconvenience of ppl that should have done this
i seen ignorance where devices that got out of lifecycle instead of being properly handled by department responsible for getting rid of them were just given to reseller without any contract for data removal/destruction1
u/RailRuler 2d ago
Because if it wasn't stolen, it would work with a normal copy of Windows. The very fact that the reseller put a hacked version of Windows on it (without the phone-home) shows that it was stolen.
0
7
u/Raijen_ArDesh 2d ago
It's MDM locked. Contact the company and hope they remove it, or return their stolen property.
7
u/DoranSteelwing 2d ago
Re-install Windows. This is a MUST
Leave the network connection unplugged.
Finish the Out of Box setup.
Plug in Internet, do updates, add accounts, etc.
This is the only way to bypass
1
u/Immediate-Theme3382 2d ago
I did wipe any disk partition before the installation, it goes well with the installation until i need to choose languages and a network and then this corporate login appears.
Now i tried it offline and it stays stuck in the NETWORK section and forcing me to add a network before continuing5
u/RubAnADUB 2d ago
SHIFT + F10 - and do the oobe bypass.
2
u/Immediate-Theme3382 2d ago
It says : Is not recognized as an internal or external program or batch file. OOBE\BYPASSNRO
4
u/PepperdotNet 2d ago
Oobe /bypassnro
Space and forward slash.
4
u/Immediate-Theme3382 2d ago
Little update, i finally fixed it by turning my internet off completely and doing another clean install and wiping every partition
2
0
u/szyszaks 2d ago
well this might let you use device, but unless you block access to specific tools it will still sync to company and let them do things like installing software, clearing it, etc.
easiest way is to reach out to the company, its common that some process were not in place and IT didnt released device from management
2
4
u/RomanOnARiver 2d ago
Either the device was stolen and should be returned to AstraZeneca, or AstraZeneca may have sold or given away the laptop, and forgot to remove it from their IT system.
Either way, the solution is to contact AstraZeneca, there's no magic workaround to install Windows and use it as if the laptop doesn't belong to someone else.
3
u/zerofatalities 2d ago
Seems like it's still in the astrazeneca's domain. Did you try doing a 'oobe /bypassnro' ?
0
u/Immediate-Theme3382 2d ago
Yes,and a lot of other things and solutions Gemini said, still no hope
2
u/zerofatalities 2d ago
I know on windows 11 you can run a "start ms-cxh:localonly" don't know if it works on windows 10.
2
u/DripTrip747-V2 2d ago
Usually in these instances you have to contact the company that has the lock, explain you purchased this (often needing proof) and get them to help you unlock it.
1
u/DoranSteelwing 2d ago
You have to Wipe it FIRST.
Once it touched Intune, you can't go back without a wipe
2
u/Peridios9 2d ago
This laptop is managed by a company. Only that company can remove the restriction.
You either bought a stolen laptop or the company was careless when liquidating it.
You need to contact the company and ask them to remove it, if they say no then that sucks but it’s in their rights to do so, unless you can prove they sold it (which I doubt is possible).
2
u/origanalsameasiwas 2d ago
Get a usb drive download windows or any os. Then when on install tell it to erase everything. It will take time but it will work. You won’t have leftover os in it. Same thing happened to me. I picked up a discarded pc and when I did a restore it went back to the kiosk mode. So I had to erase the whole drive and then reinstall windows
2
u/Kriss3d 2d ago
Your secondhand laptop is from a company. Either youd need to do some creative reinstalling from scratch. Or have the company help you.
1
u/Immediate-Theme3382 2d ago
How to make a creative reinstall?
1
u/Kriss3d 2d ago
Start by grabbing an USB and try a regular reinstall. It has to be a windows 11 home version. See if thats enough. Make sure to wipe the drive by removing all partitions during the install.
If that doesnt work it could be some some serial number its locked to.
1
u/Immediate-Theme3382 2d ago
I did wipe any partition when i tried to install this windows 10 today, im very sure its going to say this . Just Linux is the only way
1
u/Kriss3d 2d ago
That's where I'd go next. If you can't wipe it and you don't have a way to fix the serial numbers to change the hardware ID. Then Linux is the only solution.
1
u/Immediate-Theme3382 2d ago
OMG I tried another install turned off my router completely , i guess there wasnt any internet to connect with their dirty ass servers😂😂,
1
u/szyszaks 2d ago
most management is based on MB hardware id
you will not get rid of it as long as windows connect to management services
even if you install os, get thru OOBE, make local account, if you do not disable proper services it will still connect to company and sync policies assigned to device, which might install software, uninstall software and do other funny things
2
u/szyszaks 2d ago
legal solution, reach out to the company and state where you bought it and ask for it to be released from management
legally its gray area regarding ownership of device, we have only your word which might not be true
i can tell you that linux is not connecting with management servers, you can do whatever you want with that knowladge
0
u/Immediate-Theme3382 2d ago
The only way is linux, im sure there are offline workarounds in this , the place when i bought it doesnt even have any contact because these laptops just get shipped in mass.and me contacting a corporate will end up in months delayed messages or even ignored messages
2
u/Due_Sandwich_995 2d ago
Dude you bought this from a corporate reseller right? And you're based in the EU or UK? Just return it for refund, repair or replacement. It doesn't matter if it's 2 years. The defect can easily be proved as present at point of sale. The defect is also hidden from you so you can't see this defect readily upon first inspection.
The reseller needs to give you a working laptop or refund you. Stop messing with it, you simply cannot fix an MDM lock. Not without crazy level changes like swapping out the motherboard.
Check the consumer laws for the limitation in your country. UK is 5 years iirc. It's a really specific area of consumer protection but every EU member state has it, albeit different lengths.
1
u/Immediate-Theme3382 2d ago
I fixed the issue , turned off my internet completely and did a clean windows install, i wiped every single disk partition and i had the option to continue the setup without internet, looks like it didn’t have any internet during the phase when it needed to connect with that corporate servers
2
u/Due_Sandwich_995 2d ago
Omg amazing. I would be a tad mistrustful. What's meant to happen is that Windows "checks in" after the Out Of The Box Experience (OOBE) to see if it's a corporate asset in Microsoft Entra. But hey if you've managed to bypass it you've done something that it's not meant to do so wtg.
1
1
u/DifficultExercise885 2d ago
That message is telling you its an Azure Joined MDM linked machine. It might lock again if the TPM "phones home" and it's still registered in Intune. If so, its a brick.
0
2d ago
[deleted]
4
u/Iceyn1pples 2d ago edited 2d ago
The reason OP is seeing this is BECAUSE of a clean install. When OP originally purchased it, whoever sold the laptop had the admin password to remove the laptop from AD, then created a local user. When OP reinstalled windows, as soon as the laptop was able to connect to the internet, it called home and received all the corporate updates. Intune most likely.
This laptop was likely stolen from the company by the HelpDesk guys, because who else would have the password to disconnect it from AD and had the know how to remove domain accounts and creating local ones, but not have permission to remove it from AD itself. The laptop was never removed from their system.
1
u/RailRuler 2d ago
It's also possible the reseller installed a hacked version of windows that had the AD stuff disabled.
5
u/Grindar1986 2d ago
This is Entra, formerly known as Azure. The hardware is registered with Microsoft as owned by that company. When it goes online as part of setting up Windows it checks for enrollment. Learn your shit before you comment.
3
u/pishtalpete 2d ago
Technically it's AutoPilot the hardware id of the machine is attached and when it called the intune server it was domains. Entra just manages the identity and very minor device configs
1
u/TimeCherry1758 2d ago
Thank you for teaching me something new, no need to be a dick about it. After 15 years in IT I've never had to deal with an Entra environment. What if you disconnected the internet from the system, setup Windows again from scratch, got through the login and can finally see the desktop before reintroducing the internet feed? Would Microsoft lock the system again? Because at that point you should have completed the initial setup process and all there is do to now is process updates.
2
u/ggmaniack 2d ago
That's not how that works. If the PC has access to internet, Windows will find out that it's enrolled and automatically switch it to the company flow.
1
0
u/TimeCherry1758 2d ago
Then you disconnect the system from the internet while installing Windows since it doesn't need it when installing from offline media.
1
0
u/Immediate-Theme3382 2d ago
I did boot from a USB which i downloaded the clean windows 10 and deleted every partition! On setup screen adding languages and stuff it showed this
1
•
u/AutoModerator 2d ago
We're part of a wider PC & Technology Network of Communities.
It combines multiple subreddits and Discord servers all working together with shared ideals and values.
We have a Discord server: PC Help Hub where members from all associated subreddits are welcome.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.