>How do I rid myself of the password while still running as domain/windowsUser?

If you must include the password (which others are saying you shouldn't under Windows Authentication), I just ran across an entry on ASP.NET impersonation in the docs that describes storing the encrypted username and password to the registry.

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpguide/html/cpconaspnetimpersonation.asp