Nowadays, it is considered best practice to generate unique local account passwords for each machine in a Windows domain. This applies typically for the local administrator user and often one of the three following approaches are taken:
- The password is generated using a reversible algorithm (e.g. SHA1(salt + machine name))
- The password is randomly generated and then stored on a central system
- The password is set via Group Policy Preferences (GPPs)
