>How do I rid myself of the password while still running as domain/windowsUser?
If you must include the password (which others are saying you shouldn't under Windows Authentication), I just ran across an entry on ASP.NET impersonation in the docs that describes storing the encrypted username and password to the registry.