What happens when you remove a computer from a domain

Removing a computer from a domain disconnects it from the network of shared resources and user accounts managed by your organization's domain controller. After removal, that computer can no longer authenticate users through the domain—instead, it will only recognize local user accounts created directly on the machine. The computer becomes a standalone device and loses access to shared folders, printers, and other resources that were available only to domain members.

This is a one-way process that takes effect when ready. Once removed, anyone trying to log in with a domain account will see an error. If you need the computer to rejoin the domain later, you can do that, but you'll need administrator credentials and network access to the domain controller.

Key Takeaways

  • Removing a computer from a domain requires administrator access on that machine and takes effect when ready upon restart.
  • After removal, domain user accounts will no longer work on that computer—only local accounts will function.
  • The process differs slightly between Windows and macOS, but both involve accessing system settings and providing domain administrator credentials.
  • You should back up any files stored on the computer before removal, since access to network storage may become unavailable.
  • If the computer cannot reach the domain controller during removal, you may need to force the removal using local administrator credentials.

Removing a Windows computer from a domain

On Windows, the removal happens through the System Properties dialog. Open the Settings app, search for "About your PC," and scroll down to find the "Related settings" section. Click "Rename this PC (advanced)" to open System Properties, then click the "Change" button in the Computer Name tab.

In the Computer Name/Domain Changes dialog, select the "Workgroup" radio button instead of "Domain," then type a workgroup name (the default is usually "WORKGROUP"). Click OK. Windows will prompt you for domain administrator credentials—enter the username and password of an account with permission to remove computers from the domain. After you click OK, Windows will ask you to restart the computer. Save your work and restart; the removal takes effect when the machine boots back up.

If you cannot reach the domain controller—for example, if the computer is offline or the domain is unreachable—Windows may not allow the removal through the normal dialog. In that case, you can force the removal by using the command line. Open Command Prompt as administrator and run netdom remove /domain:[domain name] /userd:[domain\username] /passwordd:[password], replacing the bracketed sections with your actual domain name and credentials. This bypasses the need to contact the domain controller.

Removing a macOS computer from a domain

On a Mac bound to an Active Directory domain, open System Settings and navigate to General > Sharing. Look for the "Computers on a local network" section or check if the Mac is listed under a domain in the Network settings. The exact location depends on your macOS version and how the domain binding was configured.

Click the lock icon to unlock the settings, then look for a button to "Leave" or "Remove" the domain. You will be asked for domain administrator credentials. Enter them and confirm. The Mac will disconnect from the domain when ready; you do not need to restart, though restarting can help may support all cached domain information is cleared.

If you cannot find the domain settings in System Settings, the Mac may have been bound using command-line tools. In that case, open Terminal and run sudo dsconfigad -remove -username [admin username], replacing the username with a domain administrator account. You will be prompted for the password. This command removes the Active Directory binding and takes effect when ready.

What to do before you remove a computer from a domain

Before disconnecting, identify any files or data stored on network shares that the computer's users might need. After removal, those users will lose access to shared folders and network printers unless they have local copies of the files or the shares are reconfigured to allow local account access.

Back up any important files to an external drive or cloud storage that does not require domain authentication. If the computer has mapped network drives, note which ones are in use so you can recreate them as local shortcuts or reconfigure them after removal. Check whether any applications installed on the computer require domain authentication to run—some software licenses or security tools are tied to domain membership and may stop working after removal.

Notify users of the computer that they will need to use a local account to log in after the removal. If they have been using only domain accounts, they will need a new local username and password created on the machine before removal, or they will be locked out.

Removing a computer when you do not have domain admin credentials

If you are the local administrator on the computer but not a domain administrator, you can still remove it from the domain using the System Properties dialog on Windows or the System Settings on macOS. You will be prompted for domain administrator credentials, but if you do not have them, you cannot complete the removal through the normal process.

Contact your IT department or the person who manages your domain to request removal. Provide them with the computer name and the reason for removal. They can remove it from the domain controller's side, which will prevent the computer from authenticating to the domain even if it is still configured to try. This is not the same as a clean removal—the computer will still think it is part of the domain until you change the local settings—but it will prevent access.

Alternatively, if the computer is no longer needed and you have local administrator access, you can perform a factory reset (Windows) or erase and reinstall macOS, which will remove all domain configuration. This is more drastic but guarantees a clean slate.

Rejoining the domain after removal

If you need to add the computer back to the domain later, the process is similar to the removal but in reverse. On Windows, open System Properties again, click "Change," select "Domain," type the domain name, and provide domain administrator credentials. On macOS, go to System Settings and use the option to bind to Active Directory, then enter the domain name and credentials.

The computer will contact the domain controller, create a new computer account (or use an existing one if the IT department pre-created it), and rejoin. You will need to restart Windows for the change to take effect. After restart, domain users will be able to log in again.

Troubleshooting common removal problems

If you see an error message saying the domain cannot be found, the computer may not have network connectivity to the domain controller. Check that the computer can reach the network and that DNS is resolving the domain name correctly. If the network is working but the domain controller is offline, you may need to use the force removal method described earlier.

If you are prompted for credentials but your domain administrator password is not being accepted, confirm that you are using the correct username format (usually domain\username) and that the account actually has permission to manage computer accounts in the domain. If you are unsure, contact your IT department.

On macOS, if the "Leave Domain" option is grayed out or missing, the computer may not actually be bound to the domain, or the binding may be corrupted. Try using the Terminal command method instead. If that does not work, a full reinstall of macOS will clear any remnants of the domain binding.

Frequently Asked Questions

Will removing a computer from the domain delete user files?

No. Files stored on the computer's local hard drive remain intact. However, files stored on network shares will become inaccessible unless you back them up first or reconfigure the shares to allow local account access. User profiles for domain accounts will still exist on the computer but will not be usable for login.

Can I remove a computer from the domain without restarting?

On macOS, yes—the change takes effect when ready. On Windows, you must restart for the removal to complete. Any users currently logged in with domain accounts will be logged out when you restart.

What happens to domain user accounts after removal?

Domain accounts will no longer work on that computer. Users will see a login error if they try to use their domain credentials. You must create local user accounts on the computer for anyone who needs to use it after removal.

Can I remove a computer from the domain if it is offline?

On Windows, you can use the command-line force removal method even if the computer cannot reach the domain controller. On macOS, you may need to wait until the computer is online, or perform a full reinstall to clear the domain binding.

Do I need to notify anyone before removing a computer from a domain?

Yes. Inform your IT department and any users of the computer. They need to know that domain accounts will stop working and that local accounts will be required. If the computer hosts shared resources or is used by multiple people, removal can disrupt workflows.