Joining a Windows 10 computer to an on-premises Active Directory domain is an administrative task for business or organization networks. You need a Windows edition that supports domain join, network connectivity to the domain, correct DNS settings, and credentials with permission to add the computer.
Join the domain
- Confirm the PC is running Windows 10 Pro, Enterprise, or another domain-capable edition rather than Home.
- Connect to the organization’s local network or approved remote-access connection.
- Verify that the PC uses the organization’s DNS servers.
- Open System properties or the domain-join controls available under Settings > System > About.
- Select the option to join a domain and enter the exact Active Directory domain name.
- Enter authorized credentials when Windows requests them.
- Restart the computer, then sign in using the organization’s required domain-account format.
Domain join and Microsoft Entra join are different
Traditional Active Directory domain join connects the computer to on-premises AD. Microsoft Entra ID join is a cloud identity/device-management scenario with different setup and administration. Follow the organization’s intended enrollment method rather than treating the two as interchangeable.
Check time and DNS when the join fails
Domain authentication depends on accurate time, and service discovery depends on DNS. A PC can have normal Internet access yet still be unable to find a domain controller. Before changing firewall rules or reinstalling Windows, verify the network, DNS, time, and domain name with IT.
Preserve local administrative access
Keep an approved local administrator recovery path and encryption recovery key before joining. Group Policy and organization management can change security settings after the first domain sign-in.
Windows 10 standard support ended October 14, 2025. New domain deployments should use supported Windows versions, and existing Windows 10 domain PCs should be migrated according to organizational policy.
If the join succeeds but the user cannot sign in, do not immediately remove and rejoin the PC. Confirm that the account is enabled, the domain can be reached, and the expected sign-in name is being used.
DNS and time are common domain-join dependencies
The PC should use DNS that can locate the organization’s domain controllers, and its clock must be close enough to domain time for authentication. If the join fails, verify network reachability, DNS configuration, time, the computer name, and the authorized domain credentials before changing firewall or registry settings.
Domain join is not the same as Microsoft Entra join
Traditional Active Directory domain membership and Microsoft Entra ID are different management models. Follow the organization’s intended enrollment method, and preserve a known local administrator or other approved recovery path before changing membership.
Already on a domain and need to switch? See changing the domain on a Windows 10 PC.
Kermit Matthews is a freelance writer based in Philadelphia, Pennsylvania with more than a decade of experience writing technology guides. He has a Bachelor’s and Master’s degree in Computer Science and has spent much of his professional career in IT management.
He specializes in writing content about iPhones, Android devices, Microsoft Office, and many other popular applications and devices.