Windows 10: Is the Password or hash thereof saved at domain join?

Hi everyoneMy Question is: Is the username and/or password saved when performing a domain join?At the company I word at, only domain admin accounts can join a device into our domain. Now we do have some security concerns if the used password, or the hash of that password is saved on the machine? Should we use a dedicated Domain Account to join devices? Or are all credentials discarded after the join? AFAIK credentials of log-ins and UAC prompts are saved as hash in C:\windows\system32\config\SAM?Thanks in advance!Sandro

:)

 

UnattendedJoin error: failed to find the domain data (0x6e)

Thanks for the suggestion! I don't want to add a domain account, as this is a generic unattended install that will be used for all company machines. Do you think it's possible that the computer would join the domain if, instead of using UnattendedJoin in specialize, I used your steps but left out the specific account?

The other thing I was thinking was to use a generic account to allow the domain join during the specialize step. I added a machine password in the UnattendedJoin component, and instead of getting the error listed above, I got an authentication error, which makes me think I could probably do a secure join instead of the unsecure join.

Thoughts?

 

Re-join the domain after upgrade

There is no need to leave the domain, you can perform the upgrade (with Admin privileges).

You can also leave the domain, upgrade with a local account, then join the domain again.

Resources:

• Quick
  Tip: Join a Windows 10 PC to a Domain

 

Problem Joining a Domain

I have a new Windows 11 Pro PC...and cannot join my domain. I enter the correct user name and password and domain (i even tried domainname.local). It then asks for the computer name and computer domain. I have no idea what the computer domain is. I tried my network domain and tried Workgroup...but receive a message that the Active Directory Domain Controller could not be contacted. I can ping the domain server, but cannot join the domain.