To prevent VMs with non-persistnant disks from "falling off" the domain set the following key
HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
DisablePasswordChange <REG_DWORD> = 1
However it is still possible that domain policies may force it back to zero.
