What happens when you add a PC to a domain
Adding a PC to a domain means connecting your computer to a centralized network managed by an organization — usually your workplace or school. Once connected, a network administrator can manage your computer's settings, security policies, and software updates from a central location instead of you managing each machine individually.
The process itself takes about 10 to 20 minutes and requires administrator access on your computer. You will need the domain name, a username and password that has permission to join computers to that domain, and a network connection. After you restart, your computer will be part of the domain and you will log in using your domain account instead of a local account.
This is different from straightforward connecting to Wi-Fi. Connecting to Wi-Fi lets you use the network. Joining a domain lets the network manage your computer.
Key Takeaways
- You need administrator access on your computer, the domain name, and a domain account with join permissions to add a PC to a domain.
- The process happens in Settings on Windows 10 and 11, or in System Properties on older versions, and requires a restart.
- After joining, you log in with your domain account, and the network administrator can push policies and updates to your computer automatically.
- If you do not have the domain name or the right account credentials, your IT department or network administrator must provide them before you can proceed.
Steps to add your PC to a domain on Windows 10 or 11
On Windows 10 and 11, the process starts in Settings. Open Settings, then go to Accounts and select Access work or school. Click the button that says Connect (Windows 10) or + Add (Windows 11).
A window will open asking how you want to set up. Select Join this device to a local Active Directory domain. Enter the domain name exactly as your IT department gave it to you — for example, company.local or school.edu. Click Next.
You will be asked for a username and password. This must be an account that has permission to join computers to the domain — usually an IT administrator account, not your regular user account. Enter those credentials and click Next. If the credentials are correct, Windows will contact the domain controller and add your computer. If they are wrong, you will see an error message and need to try again with the correct information.
Windows will ask you to restart. Save your work and click Restart now. After the restart, you will see a login screen. Log in using your domain account (usually domain\username) and your domain password. Your computer is now part of the domain.
Steps to add your PC to a domain on Windows 7 or older
On Windows 7, Vista, or XP, the process uses System Properties instead of Settings. Right-click My Computer or This PC and select Properties. Look for a section called Computer Name, Domain, and Workgroup Settings and click Change settings.
A window titled System Properties will open. Click the Change button. A dialog box will appear with two radio button options: Workgroup and Domain. Select Domain and type the domain name in the field below it.
Click OK. Windows will prompt you for a username and password with permission to join the domain. Enter those credentials and click OK again. If successful, you will see a welcome message. Click OK, then restart your computer when prompted.
After restart, you will log in with your domain account. The process is complete.
What to do if you do not have the domain name or credentials
If you do not know the domain name, contact your IT department or network administrator and ask them directly. Do not guess — entering the wrong domain name will cause the process to fail. They should give you the exact spelling and format.
If you have the domain name but do not have an account with permission to join computers, ask your IT department for temporary credentials or ask them to join the computer for you. Many organizations keep a shared account specifically for this purpose, or an administrator can do it remotely.
If you are at a school or large organization, there may be a help desk or IT support line. That is often faster than emailing a general inbox.
What happens after your PC is joined to the domain
Once your computer is part of the domain, the network administrator can push Group Policy settings to it automatically. These policies control things like password requirements, which programs are allowed to run, when updates install, and what security settings are enforced. You will not see these policies being applied — they happen in the background.
You will also receive updates and patches through the domain instead of through Windows Update. Your IT department controls the timing and which updates roll out, so you may not get updates on the same schedule as home computers.
Your user profile and files may be stored on a network server instead of just on your local hard drive, depending on how your organization is set up. This means you can log in to any domain computer and see your files and settings.
Removing a PC from a domain
If you need to remove your computer from the domain later, the process is similar to joining. On Windows 10 or 11, go to Settings > Accounts > Access work or school, find the domain account, and click Disconnect. On Windows 7, go back to System Properties and change the setting from Domain back to Workgroup.
You will need administrator credentials again, and you will need to restart. After restart, you will log in with a local account instead of your domain account. Any Group Policy settings that were pushed to your computer will stop being enforced, though some may remain on the hard drive.
Common problems and what they mean
Error: "The following error occurred attempting to join the domain" — This usually means the username or password you entered is wrong, or that account does not have permission to join computers. Double-check the credentials with your IT department and try again.
Error: "The specified domain either does not exist or could not be contacted" — The domain name is misspelled, or your computer cannot reach the domain controller over the network. Check the spelling with your IT department. If the spelling is correct, your network connection may be the problem — try restarting your computer and your router.
Error: "Access is denied" — You are not running the process with administrator access. Right-click Settings or System Properties and select Run as administrator, then try again.
The computer restarts but still shows a local login screen — The domain join may have failed silently. Check the domain name and credentials again, and contact your IT department if the problem continues.
Frequently Asked Questions
Can I join a domain if I am at home on my personal Wi-Fi?
Only if your home network can reach the domain controller, which is rare. Most domain controllers are only reachable from the organization's network or through a VPN connection. If you are working from home, ask your IT department whether you need to connect to a VPN first, or whether they will join the computer for you remotely.
What is the difference between joining a domain and joining a workgroup?
A workgroup is a peer-to-peer network where each computer manages itself. A domain is centrally managed by administrators. In a workgroup, you manage your own passwords and settings. In a domain, the administrator manages policies for all computers at once.
Do I need to be an administrator to join a domain?
Yes, you need administrator access on the local computer to start the process. However, the account you use to actually join the domain (the one you enter credentials for) is usually a separate domain administrator account, not your own user account.
Will joining a domain erase my files?
No. Joining a domain does not erase files or change your hard drive. It only changes how your computer is managed and how you log in. Your existing files remain on the computer.
Can I use my domain account to log in to computers that are not on the domain?
No. Domain accounts only work on computers that are joined to that domain. On a non-domain computer, you must use a local account. If you need to use a domain account on a non-domain computer, ask your IT department whether they can set up a local account for you.