Convert Windows 10 PC from Domain to Workgroup

Windows 10 machine with a Domain account xxx.local.  Not connected to the xxx.local network anymore. How to move the machine to a Workgroup.
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

NVITEnd-user supportCommented:
To do this via the CMD command line:
netdom remove %computername% /force

Open in new window


netdom remove %computername% /domain:domainname /userD:administrator /passwordD:***** /reboot:10

Open in new window

bstaudCEOAuthor Commented:
To Clarify: If I understand it, netdom removes the Workstation from the domain, up there on the Server running something like Active Domain. The actual question is, on the Workstation, which does no longer have access to the Server, and is at an entirely different location, how do you set the workstation to belong to a local Workgroup?
Joseph HornseyPresident and JanitorCommented:
Pretty easy...

Go to Control Panel > System and Security > System > Advanced System Settings > Computer Name.  Click the "Change" button and move the radial from domain to workgroup and give the workgroup a name.

Supply any username and password you wish when prompted.  Just make something up.  Since the Win10 machine can't talk to the domain, it will just time out and drop you out of the domain anyway.

Then, reboot.

Fair warning - if you don't know the Administrator name and password of the local machine, you're going to have a hard time getting back in once you do this.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

bstaudCEOAuthor Commented:
So Step 0 of the process above is to verify that there is a local User account with Administrator privileges, or to create such a local user account with Administrator privileges beforehand.
Joseph HornseyPresident and JanitorCommented:
"Step 0".  I like that. :)

Right-click on your Windows button in the lower left corner and go to "Computer Management".

From there, go to System Tools > Local Users and Groups > Users

There should be an account on there called "Administrator" and it's probably disabled.  If so, enable it.  Then, right-click and change the password.

IF YOU HAVE ANY ENCRYPTION ON THAT MACHINE - if it's associated with the Administrator account, you won't be able to decrypt the data once you change the password.

All of this assumes you have Administrator privileges on the machine yourself.

An alternative is to create a new user account with a name you'd rather use.  Do that in the Users folder, too.  Once that's done, go to the account properties "Member Of" tab and add your account to the local Administrators group.
bstaudCEOAuthor Commented:
While we are at it, how to handle the other User accounts on the machine, whose login access was managed by the domain which they now cannot see? I guess the question is how/whether to convert those accounts to be local to the machine?
Lee W, MVPTechnology and Business Process AdvisorCommented:
You can convert the accounts (migrate the profiles) to Local accounts by creating the local accounts and then using the free tool User Profile Wizard by
Lee W, MVPTechnology and Business Process AdvisorCommented:
Note: if you aren't confident in how these work, setup a test system and test first.
bstaudCEOAuthor Commented:
It is all becoming clear(er) now.
One last part: Can different local Users somehow be associated with different Domains or with different Workgroups?
Joseph HornseyPresident and JanitorCommented:

Workgroups are just logical groupings of computers that aren't associated with each other (from a security standpoint).  An Active Directory domain is a logical grouping of computers which each share a common security scope, which is the domain.

It's kind of like having 20 people say "We're accountants" versus 20 people say "We all work for the same CPA firm".  The first group are all in accountants... sure.  But the second group are all associated with the same organization and are subject to its policies, procedures, etc.
Lee W, MVPTechnology and Business Process AdvisorCommented:
Why are you removing the domain?
Joseph HornseyPresident and JanitorCommented:
Keep in mind, you're also mixing your terminology.  With Transwiz (the software Lee and I both recommended), you're migrating the PROFILE.  The profile is the collection of settings, folders, etc. that are associated with a user account.  It is not, however, the account itself.

Your account exists in the domain you were in.  You're now creating a new LOCAL account which means it exists ONLY on that computer.  You're then taking the profile associated with your old account and associating it with your new account.
Joseph HornseyPresident and JanitorCommented:
@Lee - I took his question to mean he removed the computer from the domain and now has to force removal.
Joseph HornseyPresident and JanitorCommented:
Correction... I recommended that software on a different post; not this one.   Sorry about that. :)
bstaudCEOAuthor Commented:
Yes Hornsey and Lee both contributed to the enlightenment.
Joseph HornseyPresident and JanitorCommented:
I answered the first question, Lee answered the second.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 10

From novice to tech pro — start learning today.