I was reading reasons for clearing page files on workstations with one reason listed is that passwords can be stored in the pagefile and therefore should be cleared upon reboot in the case of somebody compromising the computer physically. So I am posing the question as it doesn't seem quite right.
I could argue that password and Kerberos functionality has little chance to written to the page file as there is no reason for the system to page a very important process, during a period where resources are available the most (login). This would be a possible practical answer, but not ideal one. The attacker could replace the computer RAM with a small amount prior to the theft. I am wondering if this is possible under any circumstance.
If it can be compromised then would a domain situation be different? The password would be processed on the server.