Encrypt unattend join password

[bailey808]

Hi,

 

Is there a way of encrypting the password in the 'Credentials' section located in the unattendjoin properties? I am using this unattended file in an enterprise environment.

 

It is highlighted in bold below:

        </component>
        <component name="Microsoft-Windows-UnattendedJoin"...

            <Identification>
                <JoinDomain>DOMAIN NAME</JoinDomain>
                <UnsecureJoin>true</UnsecureJoin>
                <Credentials>
                    <Domain>DOMAIN NAME</Domain>
                    <Password>PASSWORD</Password>
                    <Username>ADMIN ACCOUNT</Username>
                </Credentials>
            </Identification>
        </component>

 

Thanks

Jonny

[arablizzard2413]

You have UnsecureJoin set to true, you don't need credentials. Besides that, you can always delete unattend.xml in the panther directories in SetupComplete.cmd to remove the user information.

 

https://technet.microsoft.com/en-us/library/cc765972%28v=ws.10%29.aspx

[Tripredacus]

The ideal situation would be to create an account in AD which only has the ability to join PCs to the domain. This account would not have access to network shares or any other sensitive admin functions. Then there would be no problem leaving a plain-text password in your XML.

Otherwise, if you create your answer file with WSIM, and set the PlainText to be false, WSIM will hash the password when you save the .XML.

[bailey808]

Excellent answers! Thanks guys.