How to Disconnect Windows 10 From a Domain

Disconnecting a Windows 10 PC from a domain removes the requirement to authenticate against the domain controller and returns the device to local account management. This is useful when a computer is being retired, repurposed, or moved to a workgroup environment. Before you start, ensure you have the local administrator account password (or another account with local admin rights) and, if the device is still managed by your organization, confirm you have permission to unjoin it.

What You’ll Need

Local administrator account credentials (username and password) for the PC.
Domain administrator credentials if you need to remove the computer object from Active Directory afterward (optional, but recommended for proper cleanup).
Access to the device with an account that has local administrative privileges.

Step-by-Step

Back up any important data stored on the device, especially if you plan to use it as a standalone machine. Domain profiles may not carry over seamlessly.
Sign in to Windows with an account that has local administrative rights. If you don’t have one, you may need to use the built-in Administrator account (often disabled by default) or contact your IT department.
Open Settings by pressing Windows + I, then go to Accounts > Access work or school.
Under the Access work or school section, you should see your domain connection (e.g., Connected to <domain>). Click on it, then select Disconnect.
A confirmation dialog appears. Click Yes to proceed.
Windows will ask for the local administrator credentials. Enter the username and password of a local admin account (not the domain account you’re currently using). If you don’t have one, you’ll need to create one first (see Tips).
After authentication, Windows will prompt you to restart the computer. Save any open work and click Restart now.
Once the PC restarts, it will be part of a workgroup (usually named WORKGROUP). You’ll need to sign in with the local account you used in step 6 (or another local account). The old domain profile may still exist but won’t be accessible without the domain controller.

Common Mistakes

Using a domain account to disconnect: Windows requires local admin credentials, not domain ones. If you only have a domain account, the disconnect will fail.
Not having a local account ready: If you don’t have a local account with admin rights, you’ll be locked out after disconnecting. Always ensure a local admin account exists before starting.
Skipping the optional domain cleanup: Removing the PC from the domain doesn’t automatically delete its computer object from Active Directory. If not removed, the object becomes stale and can cause confusion later.
Forgetting to back up data: Domain profiles are tied to the domain; after disconnecting, you may not be able to access files stored in the profile without extra steps. Back up important files to an external drive or cloud storage.

Tips

Create a local admin account before disconnecting: If you don’t have one, go to Settings > Accounts > Family & other users, click Add someone else to this PC, then choose I don’t have this person’s sign-in information and follow the prompts to create a local account. Make it an administrator.
Use the built-in Administrator account if needed: You can enable it by running net user administrator /active:yes in an elevated Command Prompt. After disconnecting, you may want to disable it again.
Transfer domain profile data: Before disconnecting, copy files from the domain profile (e.g., C:\Users\<username>) to a local folder or external drive. After rejoining a workgroup, you can copy them into the new local profile.
Check for BitLocker: If your drive is BitLocker-encrypted and tied to the domain, you may need the recovery key. Ensure you have it before disconnecting to avoid lockouts.

Troubleshooting

“We couldn’t disconnect you from the domain” error: This often means the local admin credentials are incorrect or the account lacks admin rights. Double-check the username and password, and ensure the account is a member of the local Administrators group.
No “Disconnect” button visible: If the device is Azure AD joined (not traditional domain), the option may be under Info or require a different process. For Azure AD, you may need to go to Settings > Accounts > Access work or school, click the connected account, then Disconnect. If it’s greyed out, you may need to contact IT.
PC still tries to log in with domain after restart: This can happen if the network is still reachable and the PC hasn’t fully left the domain. Try restarting again, or check that the computer name is not still in the domain by looking at System properties (right-click This PC > Properties).
Local account password forgotten: If you can’t remember the local admin password, you may need to use password recovery tools or reinstall Windows. Always keep a record of local admin credentials.

Frequently Asked Questions

Will my files be deleted when I disconnect from the domain?

No, your files remain on the hard drive, but the domain profile may become inaccessible. You’ll need to log in with a local account and may need to take ownership of the old profile folder to access the files.

Can I reconnect to the domain later?

Yes, you can rejoin the domain by going to Settings > Accounts > Access work or school and selecting Connect. You’ll need domain credentials and network access to the domain controller.

What happens to the computer object in Active Directory?

It remains in Active Directory until manually deleted. An administrator can remove it using Active Directory Users and Computers, or it will become stale and eventually be cleaned up by organizational policy.

Do I need to be connected to the network to disconnect?

No, you can disconnect while offline, but the process may be smoother with network access. If offline, Windows will still allow the disconnect using cached credentials.

Will my installed applications stop working?

Most applications will continue to work, but those that rely on domain authentication (like some enterprise software) may fail. You may need to reconfigure them with local accounts.

Is it possible to disconnect without admin rights?

No, you must have local administrative privileges. If you don’t, you’ll need to ask an IT administrator to perform the action or provide you with local admin credentials.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →