How to remotely Join/Unjoin AD domains on Windows devices?

Active Directory is Microsoft’s Directory Service that runs on the Windows server. It enables admins to access network resources remotely. The Active Directory Domain Services stores directory information and manages user interaction with the domain.

Joining an Active Directory domain with your Windows devices allows you to bind user accounts with each device. As a result, you need not create separate user accounts for each device, and users can seamlessly log in on their devices using their Active Directory credentials.

How to remotely join AD Domain on Windows devices?

To join AD Domain on Windows devices remotely,

1. Navigate to the Manage tab.
2. Select the devices.
3. Click on Actions > Join AD Domain.
4. Domain – Specify the domain to which the Windows devices will get added.
5. Server Address – Specify the full name of the domain controller that hosts the domain.
6. Credentials:
   • Username – Enter the username of the corresponding user’s AD login credentials.
   • Password – Enter the password of the corresponding user’s AD login credentials.
7. Restart Device – Force the device to restart to apply the changes immediately. However, this may affect the users if they have any unsaved work running on the device.
8. Click on Confirm and complete the authentication using your login credentials to deploy the configuration to the device.

How to check the status of Domain join

To check the status of the AD Domain join on your Windows devices,

1. Navigate to the Manage tab and select the device.
2. In the Device Summary tab, check the Domain/Workgroup Info section.
3. Domain Joined:
   • Yes – The device has successfully joined a domain or a workgroup.
   • No – The device is not joined to a domain or a workgroup.
   • N/A – Unable to fetch the AD Domain status of the device.
4. Domain/Workgroup – The name of the domain or workgroup to which the device has been added.

How to remotely Unjoin AD Domain on Windows devices?

To unjoin AD Domain on Windows devices remotely,

1. Navigate to the Manage tab.
2. Click on Actions > Unjoin AD Domain.
3. Credentials:
   • Username – Enter the username of the corresponding user’s AD login credentials.
   • Password – Enter the password of the corresponding user’s AD login credentials.
4. Restart Device – Force the device to restart to apply the changes immediately. However, this may affect the users if they have any unsaved work running on the device.
5. Click on Confirm and complete the authentication using your login credentials to deploy the configuration to the device.

What happens at the device end?

When you join a device with an Active Directory Domain, the corresponding user account will be automatically created on the user’s device. Upon restarting the device after policy association, the user will be able to access the AD account using their Active Directory credentials.

When you unjoin a device, the AD account will get removed from the device upon the next restart, and the user can no longer access their AD account.