Group Policy

Hello.

I have a stand alone XP pro computer that is not (as far as I know) part of a Domain.

I have found many indicators that my machine is being fed Group Policy from a Domain controller.

I would like to know how this could be when I have not attempted to join a Domain.

Perhaps someone could give me a reasonable explanation why all my OS settings, security, software firewall, registry and even spoofed MAC addresses appear to be set by Group Policy dispite the fact my computer is not (as far as I know) a member of a Domain.

Thanks.

-DJ

So I assume you are in a LAN with domain controllers?

Did you check Computer Properties / Computer Name?
Does it say you are in a domain or in a workgroup?
And if you click the Change button, is the domain or workgroup radio button checked?

No. I'm not on a LAN with DC's. It's my little ole stand alone home computer.

The domain is not filled in. It is in the default setting WORKGROUP.

However, the admin accout doesn't have the rights it should and many references in log files indicating RAS, RemoteDesktopHelp, terminal services and a myriad of remote access references. The settings to turn off remotedesktop for instance are not available as if Group Policy removed them.

There are many indicators that the settings are all configured with a GP coming from somewhere.

When I first tried using GPEdit.msc it came up and showed lots of interesting settings that appear to have been
inherited from a Windows 2008 server. I don't own a Win2008 server.

During my perusal, the display suddenly blanked and the command gpedit.msc (DOS or RUN) would not execute.

It seems like a third party to me... but I wanted to rule out other possibilities first.

Thanks for the response...

I'm going to suggest going here to the Am I Infected forum which is my suggestion for your problem.
http://www.bleepingcomputer.com/forums/forum103.html

My laptop seems to be laggy and runs hot, at times it's hotter than other times. It also runs loud.

Many time Malware can change settings to prevent you taking certain actions. For example it may disable the Taskmanager where you get a message such as: Task Manager has been disabled by your administrator.

Good Luck
Roger