How to Remove a Windows 10 PC from a Local Active Directory Domain
A network based on a Domain provides centralized administration of the entire network from a single computer which is called a server. A Domain provides single user login from any computer connected to that network within the network perimeter. Users are allowed (or restricted) to access resources depending upon the permissions they have.
If your Windows 10 PC is joined to a domain, you can remove the PC from the domain if needed.
This tutorial will show you how to remove a Windows 10 Pro, Enterprise, or Education PC from a local Active Directory Domain in Windows 10.
You must be signed in to an administrator account on your Windows 10 PC to leave a domain.
Contents
- Option One: To Remove PC from a Domain in Settings
- Option Two: To Remove PC from Domain in System Properties
1 Open Settings, and click/tap on the Accounts icon.
2 Click/tap on Access work or school on the left side, click/tap on the connected AD domain (ex: "TEN") you want to remove this PC from, and click/tap on the Disconnect button. (see screenshot below)
3 Click/tap on Yes to confirm. (see screenshot below)
4 Click/tap on Disconnect. (see screenshot below)
If this PC has BitLocker installed and running, make sure you save a copy of the BitLocker recovery key somewhere other than this PC first.
How to Backup BitLocker Recovery Key for Drive in Windows 10
5 Click/tap on Restart now. After restarting, your PC won't be joined to the domain (ex: "ten.forums") anymore. (see screenshot below)
Your PC will now be a member of the default WORKGROUP name. If you like, you can change its workgroup.
1 Open the Control Panel (icons view), and click/tap on the System icon.
Starting with Windows 10 build 20161, you will need to open Settings instead, click/tap on the System icon, and click/tap on About on the left side.
2 Click/tap on either the Advanced system settings link on the left side or the Change settings link on the right side. (see screenshots below)
3 Click/tap on the Change button in the Computer Name tab. (see screenshot below)
4 Select (dot) Workgroup, type the workgroup name (ex: "BRINKGROUP") you want to be a member of after leaving the domain, and click/tap on OK. (see screenshot below)
5 Click/tap on OK to confirm. (see screenshot below)
6 Type the user name and password of an administrator account from this PC (not domain), and click/tap on OK. (see screenshot below)
7 Click/tap on OK. (see screenshot below)
8 Click/tap on OK. (see screenshot below)
This does not restart the computer yet.
9 Click/tap on Close. (see screenshot below)
10 Click/tap on Restart Now. After restarting, your PC won't be joined to the domain (ex: "ten.forums") anymore. (see screenshot below)
That's it,
Shawn
Related Tutorials
- How to Install Windows Server 2016 and Setup Local Domain Controller
- How to Join a Windows 10 PC to a Local Active Directory Domain
- How to Enable or Disable Show Local Users on Sign-in Screen on Domain Joined Windows 10 PC
Remove Windows 10 PC from a Domain
-
New #1
So I've just come across a machine that is on a Domain and I would like to change it to a Workgroup.
For clarity if I follow these instructions will the data files for the existing user be deleted. (Pictures, documents, music, downloads)
I recognize access to network resources will be removed. That happened years ago.
Thanks
-
-
-
New #4
It indeed gives you a new user.
Doesn't look like old user is deleted just no option to access.
I tried this on a dummy disk that I created with Macrium so no harm done to original disk
Would recommend warning to copy all user data out of account. Maybe take ownership works on user account, I did not try so I cannot confirm if data was left in folder.
-
New #5
If the account's profile folder is still there, you should be able to access it while signed in to any administrator account.
-
New #6
Thanks Shawn.
Still with new user there is a lot of set up and trying to emulate old desktop. I will inform client that this can be done but he would have to live with some changes.
Not sure if you agree but I would add some words to tutorial to discuss how this change is seen by users.
-
New #7
Question on step 5: it says I require the "password of local administrator account"
Will any user with administrator rights suffice, or is it required to know the password of the actual administrator user?
-
New #8
In my case it was just a user with admin rights.
May I suggest you create an Image before doing this. Easy to fall back if you have to.
Remove Windows 10 PC from a Domain
How to Remove a Windows 10 PC from a Local Active Directory DomainPublished by Shawn BrinkCategory: Network & Sharing
07 Dec 2020
Quote
Related Discussions
