logo
search
Office Installation Errors

How to Handle Administrator Credentials in Office Deployment Tool XML

Elise WilliamsElise Williams Oct 16, 2026 870 views

Question details

The user wants to know if they can store administrator login information or passwords directly in the Office Deployment Tool (ODT) configuration XML file to avoid active directory credential prompts during installation.

How to Handle Administrator Credentials in Office Deployment Tool XML
Product
Microsoft Office Deployment Tool (ODT)
Device & OS
not provided
Scenario
Deploying Microsoft Office across multiple devices in an enterprise environment using the Office Deployment Tool.
Observed behavior
The user is repeatedly prompted for Active Directory administrator credentials during the deployment process and seeks a way to automate this using the XML configuration file.
Before you start

Before altering your deployment strategy, ensure you have administrative access to the target system and verify that your installation source files are stored in a network location fully accessible to the deployment accounts.

Solution 1Recommended

Use a Pre-Authorized Deployment System or Managed Account

Since embedding credentials in the XML file is a severe security risk and unsupported, you must run the ODT using an account or deployment system that already possesses the required permissions.

The Office Deployment Tool configuration XML is designed to define installation options, not to handle authentication. Storing Active Directory or local admin passwords in plain text within an XML file is highly insecure.

1
Log in with proper rights

Log in to the deployment system or target device using an account that already has local administrator rights.

2
Verify network access

Ensure that the deployment account has read access to the network share or installation source where the Office files and configuration XML are stored.

3
Open Command Prompt as Administrator

Search for 'cmd' in the Windows start menu, right-click 'Command Prompt', and select 'Run as administrator'.

4
Execute the ODT commands

Run the ODT commands (setup.exe /download and setup.exe /configure) manually, or deploy them via an enterprise distribution platform (like Microsoft Endpoint Configuration Manager) that executes under the SYSTEM context.

Use a Pre-Authorized Deployment System or Managed Account
Security Warning: Never attempt to embed plain-text usernames or passwords in any configuration XML. This exposes your Active Directory credentials to anyone with access to the file.
Free Microsoft Office alternative

Switch to WPS Office for Easier Enterprise Deployment

If managing complex XML configurations, Active Directory permissions, and Office Deployment Tool credential issues is slowing down your enterprise setup, consider WPS Office. It provides a lightweight, easy-to-deploy suite that sidesteps these complex administrative hurdles while maintaining excellent compatibility with Microsoft Office formats.

Free, lightweight, and incredibly easy to install across enterprise networks without complex XML configurations.Highly compatible with Microsoft Word, Excel, and PowerPoint file formats.No forced Active Directory credential prompts during standard automated installations.Familiar user interface ensuring a seamless migration for your team without extensive retraining.
microsoft office alternative - wps office

Frequently Asked Questions

Can I encrypt passwords inside the ODT configuration XML?

No, the Office Deployment Tool configuration XML does not support storing or encrypting Active Directory, network, or administrator passwords. Authentication must be handled by the environment or account executing the setup.

Why do I keep getting prompted for AD credentials when running setup.exe?

This usually happens because the account running the setup lacks the necessary permissions to access the installation source on the network share, or your proxy/firewall requires authentication to reach Microsoft's CDN servers.

Is there a GUI tool to create the configuration XML?

Yes, Microsoft provides the Microsoft 365 Apps admin center (config.office.com), which allows administrators to visually customize the deployment options and generate the XML file without manual coding.