yup - sounds like the same issue that i am having.
yes - after you change the administrator password, you can logon to windows.
if you try to join the vm to a domain from template, that fails as well - from the web client. domain joining works fine with the windows client.