22. March 2016
By default, standard domain users can add computers to the domain. This is a major security threat to any company.
To disable this go to ASDI Edit.Default Naming Context > “DC=domain,DC=com” > Properties > Attribute Editor:
You need to modify this property to the value of 0. ms-DS-MachineAccountQuota