Accounts (Windows Configuration Designer reference)

  • Article

Use these settings to join a device to an Active Directory domain or a Microsoft Entra tenant, or to add local user accounts to the device.

Applies to

Setting groups Windows client Surface Hub HoloLens IoT Core
Azure ✅ ✅ ✅
ComputerAccount ✅ ✅ ✅
Users ✅ ✅ ✅

Azure

The Azure > Authority and Azure > BPRT settings for bulk Microsoft Entra enrollment can only be configured using one of the provisioning wizards. After you get a bulk token for Microsoft Entra enrollment in a wizard, you can switch to the advanced editor to configure more provisioning settings. For information about using the wizards, see:

ComputerAccount

Specifies the settings you can configure when joining a device to a domain, including the computer name and the account to use for joining the computer to the domain.

Note

If you want to create a provisioning package that joins a device to Active Directory AND sets HideOobe, and you want to apply that package during OOBE, we also recommend setting the ComputerName and creating a local admin account in the provisioning package.

Setting Value Description
Account String Account to use to join computer to domain
AccountOU Enter the full path for the organizational unit. For example: OU=testOU,DC=domain,DC=Domain,DC=com. Name of organizational unit for the computer account
ComputerName On desktop PCs, this setting specifies the DNS hostname of the computer (Computer Name) up to 63 characters. Use %RAND:x% to generate x number of random digits in the name, where x must be a number less than 61. For domain-joined computers, the unique name must use %RAND:x%. Use %SERIAL% to generate the name with the computer's serial number embedded. If the serial number exceeds the character limit, it will be truncated from the beginning of the sequence. The character restriction limit doesn't count the length of the macros, including %RAND:x% and %SERIAL%. This setting is supported only in Windows 10, version 1803 and later. To change this setting in Windows 10 version 1709 and earlier releases, use the ComputerName setting under Accounts. Specifies the name of the Windows device (computer name on PCs)
DomainName String (can't be empty) Specify the name of the domain that the device will join
Password String (can't be empty) Corresponds to the password of the user account that's authorized to join the computer account to the domain.

Users

Use these settings to add local user accounts to the device.

Setting Value Description
UserName String (can't be empty) Specify a name for the local user account
HomeDir String (can't be empty) Specify the path of the home directory for the user
Password String (can't be empty) Specify the password for the user account
UserGroup String (can't be empty) Specify the local user group for the user