Any network gear worth buying for a company large enough to hire Admins supports remote authentication using TACACS or Radius, so no you shouldnt have passwords for these devices written down either, Just use a radius server to connect to your AD creds via LDAP lookup.