Hi Morena,
Thank you for posting question on Microsoft Windows forum!
Based on your query of unjoining the laptop from the domain without proper domain administrator password which is extremely challenging task. Since it is a security measure designed to prevent unauthorized removal of devices from an organizational network. Nevertheless, the followings are a few methods you can go ahead to give it a shot.
1.Using a Local Administrator Account (if available and not disabled by GPO)
Via System Properties:
- Press Windows Key + R, type sysdm.cpl, and press Enter.
- Go to the "Computer Name" tab and click "Change...".
- Select "Workgroup" and type a workgroup name (e.g., "WORKGROUP").
- Click "OK". You might be prompted for administrator credentials – enter the local administrator password.
- Restart the computer. Via Via Settings (Windows 10/11):
- Open Settings > Accounts > Access work or school.
- Click on the connected AD domain and then "Disconnect".
- Follow the prompts. You'll likely need to provide local administrator credentials.
- Restart the computer.
Please note that Domain Group Policies (GPOs) can often disable or restrict local administrator accounts. If this is the case, this method won't work directly.
2.Resetting the Local Administrator Password (if local admin is disabled/unknown).
If the local administrator account is disabled or you don't know its password, you can try to reset it using a bootable utility. This usually requires physical access to the laptop.
Bootable Password Reset Tools: Tools like "Offline NT Password & Registry Editor" (often found on Hiren's BootCD or similar recovery environments) allow you to boot the laptop from a USB drive or CD, bypass the Windows login, and reset local account passwords, including the administrator account.
- Download the ISO for a reputable password reset tool and create a bootable USB drive.
- Boot the laptop from the USB drive (you might need to change the boot order in the BIOS/UEFI settings).
- Follow the tool's instructions to select the Windows installation and reset the local administrator password.
- Reboot the computer and log in with the newly reset local administrator account. Then, proceed with Method 1 to unjoin the domain.
You can refer to the following article for more information.
Hope the above information is helpful!