Local Sign-In Option Missing on Domain Controller

Question

Hi Community,

I had previously attempted to rename my domain controller from TBBD-Ops-Desk to DC-01, but the rename did not persist. I have since reverted the hostname back to TBBD-Ops-Desk.

After this process, I noticed that the local sign-in option is missing on the Windows login screen.

Environment Details:

• Domain: TBBD.local

Current Hostname: TBBD-Ops-Desk

Azure AD Connect is configured

Screenshot attached showing ipconfig /all and whoami /groups output

Question:

How can I restore the local sign-in option on Windows?

Any guidance or best practices would be greatly appreciated.

Best regards,

Moazzem Hossain

Answer 1

That's expected. Domain controllers to not offer the option to log on locally - once promoted, they only allow logon via domain-based credentials (stored in AD DS database, not in the local SAM database - as would be the case on a workgroup or a domain-joined computer).

---

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin