Windows supports 4 kinds of user account. Unattended XML can only provision local users.
- local user
- Microsoft Account user (MSA)
- local Active Directory user (AD)
- Azure Active Directory user (AAD)
NTLite can't assign AD logins, but like most imaging solutions can only provide a domain join credential for the PC.
AAD is another form of AD, but provided at the cloud level for remote users. AAD registers your PC's hardware ID into Autopilot. If OOBE is online, then the PC is redirected automatically to the enrolled domain. The end user cannot opt-out of AutoPilot, it must be done from the admin's side.
For security reasons, you can never provide AD or AAD passwords, but only credentials to join the domain. OOBE or the logon screen will pass you to the domain server for authentication.
If you have Office 365 SOHO subscriptions ("small office/home office"), then it's linked to MSA.