Active Directory domain (e.g. domain.com) that newly provisioned Windows agents join, using the Azure JsonADDomainExtension. Leave blank to disable.

• Domain join credentials must be username/password credentials, with the username in DOMAIN\user or user@domain.com form.
• The virtual network/subnet DNS must resolve the domain (point it at your domain controllers).
• Optionally set an OU path, e.g. OU=Example,DC=domain,DC=com.
• The VM reboots once after joining; any startup script runs after the reboot.
• Computer accounts are not removed from Active Directory when agents are deleted.