Bitlocker Remediation for a Personally-Owned Device

You have enrolled one or more of your personal devices to be managed by JMU IT.  When activating Microsoft Office 365 from JMU, there is an option during the installation and activation process that may have been overlooked and enrolled your computer into JMU Mobile Device Management policies, which has the potential to override your own preferences in Windows. This association must be removed before you can change some settings, and it should also be removed so that you retain full functionality of your device and access to your files in the future.

To Begin:

  1. Determine which computer is enrolled by either contacting the IT Help Desk at helpdesk@jmu.edu or through the following steps:
  2. In the Windows 10 Search box, type Settings and click Open
  3. Go to Accounts, then Access work or school
  4. Look for a Work or School Account that has your eID@dukes.jmu.edu listed below it.
    1. If you don't find this account on this computer, check other computers that you may used to install and activate Microsoft Office 365
  5. On the enrolled computer from step 1, make sure you have two local accounts on your computer - an administrator account and a standard account
  6. In the Window Search box, type Control Panel and click Open
  7. Click on User Accounts
  8. Click on User Accounts again
  9. Then, click on Manage another account
  10. If you do have both accounts, sign in with both accounts to verify you know the password to each account
    1. If you have neither or are missing one, click Add a user account in the lower left corner
    2. Click Sign in without a Microsoft account in the lower left corner.
    3. Click on Local Account
    4. Fill in the Add a user form. 
    5. You have created a local account.  Do this twice if needed. 
  11. One of your local accounts needs to be an administrator.  If neither account is an administrator, you have to change the account type for one of the accounts.
    1. Go back to Control Panel and under User Accounts click on Change account type
    2. Then click on Change account type again
    3. Click on the account you want to make an Administrator.  Select the Administrator radio button and click Change Account Type to make this local account an Administrator.
    4. Only use this account to install software or make changes.  The other local account is for general internet use.
  12. Backup data that is important to retain.
  13. Once both accounts are setup you can sign in with your Dukes account to download OneDrive files (use the OneDrive app for this instead of the web page) and other important files to a flash drive or C:\Users\Public. 
  14. Copy any files from your Dukes profile (C:\Users\<eID> folder) to a flash drive or C:\Users\Public. 
  15. Once all you have all you files saved, sign in with your local computer account and copy the files to that profile folder C:\Users\<the name of your new local account>
    1. If logging in to the local admin account, you will need use .\ before the local admin account name
  16. Now remove the former connected account managed by JMU:
    1. In the Windows Search box, type Settings and click Open
    2. Go to Accounts, then Access work or school
    3. Select the connected account that you want to remove, then select Disconnect
    4. To confirm device removal, select Yes
    5. Then sign into the various applications that require your JMU email (eID@dukes.jmu.edu) such as Outlook, your Office 365 applications, or Microsoft Teams.
    6. Make sure to uncheck "Allow my organization to manage my device" and click "No, sign in to this app only" (or it may say "This app only")

 
Additional information can be found here
 

Print Article