i used to join to domain for sake of better login time and to apply group policy in advance , but a lot of issues have been discovered related to AD and group policy some times is not applied probably and temp profile ,

the solution was to not join to domain

and if some application installation require domain , i join it to install the app but before the provisioning i disjoin