yes but if you use

Shell '%comspec% /c net user "$USERNAME" "$PASSWORD" /domain >nul'

it sets the password but doesn't set the expiredflag so it doesn't ask the user to change it on next logon