How to Handle Administrator Credentials in Office Deployment Tool XML
Question details
The user wants to know if they can store administrator login information or passwords directly in the Office Deployment Tool (ODT) configuration XML file to avoid active directory credential prompts during installation.

- Product
- Microsoft Office Deployment Tool (ODT)
- Device & OS
- not provided
- Scenario
- Deploying Microsoft Office across multiple devices in an enterprise environment using the Office Deployment Tool.
- Observed behavior
- The user is repeatedly prompted for Active Directory administrator credentials during the deployment process and seeks a way to automate this using the XML configuration file.
Before altering your deployment strategy, ensure you have administrative access to the target system and verify that your installation source files are stored in a network location fully accessible to the deployment accounts.
Use a Pre-Authorized Deployment System or Managed Account
Since embedding credentials in the XML file is a severe security risk and unsupported, you must run the ODT using an account or deployment system that already possesses the required permissions.
The Office Deployment Tool configuration XML is designed to define installation options, not to handle authentication. Storing Active Directory or local admin passwords in plain text within an XML file is highly insecure.
Log in to the deployment system or target device using an account that already has local administrator rights.
Ensure that the deployment account has read access to the network share or installation source where the Office files and configuration XML are stored.
Search for 'cmd' in the Windows start menu, right-click 'Command Prompt', and select 'Run as administrator'.
Run the ODT commands (setup.exe /download and setup.exe /configure) manually, or deploy them via an enterprise distribution platform (like Microsoft Endpoint Configuration Manager) that executes under the SYSTEM context.

Troubleshoot and Resolve Unexpected Credential Prompts
If a credential prompt still appears during deployment, it is likely triggered by network access, proxy authentication, or elevation requirements rather than the ODT itself.
Switch to WPS Office for Easier Enterprise Deployment
If managing complex XML configurations, Active Directory permissions, and Office Deployment Tool credential issues is slowing down your enterprise setup, consider WPS Office. It provides a lightweight, easy-to-deploy suite that sidesteps these complex administrative hurdles while maintaining excellent compatibility with Microsoft Office formats.

Frequently Asked Questions
Can I encrypt passwords inside the ODT configuration XML?
No, the Office Deployment Tool configuration XML does not support storing or encrypting Active Directory, network, or administrator passwords. Authentication must be handled by the environment or account executing the setup.
Why do I keep getting prompted for AD credentials when running setup.exe?
This usually happens because the account running the setup lacks the necessary permissions to access the installation source on the network share, or your proxy/firewall requires authentication to reach Microsoft's CDN servers.
Is there a GUI tool to create the configuration XML?
Yes, Microsoft provides the Microsoft 365 Apps admin center (config.office.com), which allows administrators to visually customize the deployment options and generate the XML file without manual coding.




