Joining Windows Embedded to a Domain

Q: Can a Windows Embedded deployment join a domain?

A: Normally Windows Embedded has a registry filter that stops the persistence of changes to the OS, which would include the secret key that's used for a domain-joined machine. However, a filter can be enabled that allows the change of registry areas related to joining a domain. This is detailed at the Microsoft MSDN website, and this is enabled by default on many devices supplied by vendors, particularly those that are thin clients.