How to Join a Computer to a Domain

What Joining a Domain Means and Why You'd Do It

Joining a computer to a domain means connecting it to a centralized network where one administrator can manage user accounts, passwords, security settings, and software across multiple machines at once. Instead of managing each computer separately, a domain lets IT staff push updates, enforce security rules, and control who can log in from a single location.

Most workplaces use domains. Home users and small offices that don't need centralized control typically don't. If your workplace gave you a computer and told you to join it to the company domain, or if you're setting up a small office network, this is the process you need to follow.

Key Takeaways

Your computer must be on the same network as the domain controller, and you need the domain name, a username, and a password with permission to join computers to the domain.
On Windows, you access the domain join dialog through System Properties, enter the domain name, and restart the computer to complete the process.
On Mac, the process happens in System Settings under Directory Utility and requires the same domain credentials.
After joining, you log in using your domain account instead of a local computer account, and your computer receives settings and software from the domain administrator.
If the join fails, the most common causes are network connectivity, incorrect domain name spelling, or insufficient permissions on the account you're using.

What You Need Before You Start

Gather these four things before you begin. First, the domain name — this is the network identifier, usually something like "company.local" or "office.corp". Your IT department or network administrator will give you this. Second, a username and password that has permission to join computers to the domain. This is often an administrator account or a service account created specifically for this task; your regular user account may not have the right permissions. Third, your computer must be connected to the network — either by ethernet cable or Wi-Fi — and able to reach the domain controller. Fourth, your computer's network settings must be configured to use the correct DNS server, which your IT department can confirm.

If you're unsure whether your account has permission to join the domain, ask your IT department before you start. Attempting to join with an account that lacks permission will fail and may lock the account temporarily.

Joining a Windows Computer to a Domain

On Windows 10 or Windows 11, right-click the Start button and select System. Scroll down and click Rename this PC (advanced). In the window that opens, click the Change button. A dialog box appears with two fields: one for the computer name and one for the domain. Leave the computer name as is unless your IT department told you to change it. In the domain field, type the domain name exactly as your IT department provided it — spelling and capitalization matter.

Click OK. Windows will prompt you for a username and password. Enter the domain username and password you were given — this is usually formatted as "domain\username" or just the username, depending on your setup. Click OK again. If the join succeeds, Windows will display a welcome message. If it fails, read the error message carefully; the most common failures are network connectivity issues, incorrect domain name spelling, or insufficient permissions on the account.

After a successful join, Windows will ask you to restart the computer. Do this when ready. When the computer restarts, you will see a login screen that now includes your domain. Log in using your domain username and password. Your computer is now part of the domain and will receive settings and software updates from the domain administrator.

Joining a Mac to a Domain

On macOS, open System Settings and navigate to General, then Sharing. Look for the option to join a directory or domain — the exact location varies by macOS version. Some versions require you to open System Preferences and search for "Directory Utility" instead. Once you find Directory Utility, click the lock icon to unlock it, then click the + button to add a new directory.

Select Active Directory from the list. Enter the domain name, your username, and your password. Click Bind or OK depending on your macOS version. The Mac will contact the domain controller and attempt to join. If successful, you will see a confirmation message. Restart the Mac. When it restarts, you can log in using your domain account.

What Happens After You Join

Once your computer is part of the domain, several things change. You no longer log in with a local account created on that specific computer; instead, you log in with your domain account, which is stored on the domain controller. This means you can log in on any computer in the domain using the same username and password. The domain administrator can now push software, security updates, and configuration settings to your computer automatically. Your files may be redirected to a network location, and your desktop settings may be controlled by group policy.

You will also see shared network resources — printers, file servers, and other computers — more easily, because the domain handles authentication for you. If you forget your password, you will need to contact your IT department or help desk to reset it, rather than resetting it locally on the computer.

Troubleshooting a Failed Domain Join

If the join fails, start by checking network connectivity. Open a command prompt or terminal and type ping 8.8.8.8 to confirm you have internet access. Then type nslookup domain.name (replacing "domain.name" with your actual domain) to confirm your computer can reach the domain controller. If this fails, your DNS settings are incorrect or the domain controller is unreachable.

Next, verify the domain name spelling. Domain names are case-sensitive in some systems and must match exactly what your IT department provided. If you typed it wrong, try again. If you are using the wrong username or password, or if your account lacks permission to join computers, the domain controller will reject the request. Contact your IT department to confirm your credentials and permissions. If the error message mentions a timeout or connection refused, the domain controller may be offline or your firewall may be blocking the connection — ask your IT department to check.

Removing a Computer from a Domain

If you need to remove a computer from a domain, the process is similar to joining. On Windows, return to System Properties, click Change, and select Workgroup instead of Domain. Enter a workgroup name (the default is "WORKGROUP") and click OK. Restart the computer. On Mac, open Directory Utility, select the domain, and click the − button to unbind it. Restart the Mac.

After removal, you will log in with a local account instead of your domain account, and you will no longer receive settings or software from the domain administrator. Any files that were stored on the domain or redirected to a network location will no longer be accessible from that computer unless you have a separate local copy.

Frequently Asked Questions

Can I join a domain if I'm working from home?

Only if your home network can reach the domain controller. This usually requires a VPN connection to your company network. Connect to the VPN first, then follow the domain join process. If the join fails, your VPN may not have the right routing or DNS settings — contact your IT department.

What if I don't know the domain name?

Ask your IT department or network administrator. They will provide the exact domain name and confirm that your account has permission to join. Do not guess or use a domain name you found online, as this will cause the join to fail.

Do I need administrator rights on my computer to join a domain?

Yes. You must be logged in as a local administrator on the computer to join it to a domain. If you are not, ask your IT department to log in and complete the join for you, or to give you temporary administrator rights.

Will joining a domain erase my files?

No. Joining a domain does not delete files or settings on your computer. However, after you join, the domain administrator may push new settings or policies that change how your computer behaves. Your existing files remain intact.

Can I join a Mac and a Windows computer to the same domain?

Yes, if the domain is set up to support both. Most corporate domains support both Windows and Mac computers. However, some smaller or older domains may only support Windows. Ask your IT department whether your domain supports Mac before you attempt to join.

This guide is for general information only and is not medical, financial, legal, or other professional advice. For decisions specific to your situation, consult a qualified professional. See our Editorial Policy.