I have a customer who's laptop keeps reverting back from a domain to a workgroup. The user reboots and the domain goes away. He is able to login under a local admin account and then re-join to the domain and his profile and everything are back. It will work fine for a few day to a week and then itreverts back to workgroup for no reason.

Hi, Are you sure his laptop is not infected to any viruses? What OS is he running? Windows 7?MCT, MCSA/MCSE Security http://esitech.spaces.live.com/

Windows 7 Pro 32-bit Running symantec end point and its virus free.

Hi Brad, I can remember that symantec had some product called "goback". I'm not sure if it is still a sold. However its purpose was to restore the system state of a computer. Is it possible that your customer is using any symantec component that restores the system state regulary? That would explain the strange behaviour. Ralf

Does not have goback on it. Actually found out that he did not have symantec but had AVG. He does regularfull scans and does not show any virus's. Had him remove AVG and install Symantec Endpoint protection and do a full scan and it found nothing. Malwarebytes comes out clean to. Any other ideas?

Did you find a solution or find what was causing this to happen? I have several win7 machines that seem to almost restore back to pre domain configs. I have sys restore disabled through gp, we do use symantec endpoint v(12.1), no other restore software is used. My users do not have the rights to do much of anything so I'm lost, any ideas?

Same here, for unknown reason every once in a while a laptop reverts to workgroup/pre-domain config, sysrestore is disabled and there are no restore points. Using Trend here BTW. Found another thread but it was regarding HP, these are not, so its a Win 7 thing? Not sure how it could be an automatic "Last Known Good" type of restore since it would have been on the domain for a couple of months, the workgroup settings would not be an option. Users can't/didn't do anything to select a recovery. There is no OEM recovery partition.