Computer does not join the domain if encrypted domain administrator password is in the Identification section of an unattended answer-file

Article ID: 313818 - View products that this article applies to.
This article was previously published under Q313818
Expand all | Collapse all

SYMPTOMS

If you run a Windows XP unattended answer-file that includes an encrypted domain administrator password in the [Identification] section, the computer may not join the domain. The following text is an example of an unattended answer-file that includes an encrypted domain administrator password:
[Identification]
JoinDomain=mydomain
DomainAdmin= installer
EncryptedDomainAdminPassword=d85774cf671a9947aad3b435b51404eebaac3929fabc9e6dcd32421ba94a84d4

CAUSE

This issue may occur because the network Setup procedure does not support an encrypted domain administrator password in the [Identification] section in an unattended answer-file.

RESOLUTION

To work around this issue, change the password to a clear text form and use the DomainAdminPassword parameter.

MORE INFORMATION

The Windows XP Deploy.chm help file incorrectly lists the EncryptedDomainAdminPassword entry as a option. It also mentions the Hashpwd.exe utility. Both are documentation errors.

The only password that can be encrypted is the administrator password. The Setupmgr.exe utility can be used to encrypt the administrator password.

Properties

Article ID: 313818 - Last Review: January 15, 2006 - Revision: 1.3
APPLIES TO
  • Microsoft Windows XP Professional
  • Windows Server 2008 Datacenter without Hyper-V
  • Windows Server 2008 Enterprise without Hyper-V
  • Windows Server 2008 for Itanium-Based Systems
  • Windows Server 2008 Standard without Hyper-V
  • Windows Server 2008 Datacenter
  • Windows Server 2008 Enterprise
  • Windows Server 2008 Standard
  • Windows Web Server 2008
Keywords: 
kbenv kbprb KB313818

Give Feedback