This message was deleted.

Generally i would do, although you might need to supply domain creds to connect to *stuff

I had done it mostly to keep the size down and not have the Domain Admin accounts profile built into the image.

thats how i do it.

Also, it helps avoid caching any uwanted user GPO objects in AD. You do have the base image placed in a blocked OU with as few GPO objects as possible, of course? 🙂