How a linked clone joins the domain (1029895)
This article provides information about the behind the scenes procedures that take place when a linked clone desktop joins the domain.
- View Composer creates the machine account in Active Directory.
- View Composer sets the machine password in virtual machine’s internal disk “InternalDisk”. This disk is not visible to the guest during normal usage.
- When the View Composer agent starts, it joins the machine to the domain using the machine password and the Microsoft API NetJoinDomain
Note: The SysPrep customization specification does not need a domain / administrator account / password. When View Manager invokes SysPrep, it always requests a workgroup join. This method of joining a domain is fully supported by Microsoft (see the NetJoinDomain documentation for more information) and is more secure than the vCenter Server domain join using the customization spec because the domain administrator password is not exposed.