Normal Domain Users Can Join default 10 machines to a domain
February 6th, 2011 by Awinish Vishwakarma and tagged OS
By default, any domain users can add up to 10 machines to a domain, the reason is Every domain has a default setting for ms-DS-MachineAccountQuota value 10. You can modify this object in directory to prevent the domain user from joining the machine into domain by using ADSIedit tool to prevent this behavior. WARNING Using […]
Posted in Directory Services, OS/Certificates | 6 Comments »