I prefer that the master vm is not a part of the domain, in the past i see some strange things about trust relations between desktop and domain.

After reverting the vm to a pervious state, we got some problems with the machine password age.