TechShizz | How to stop normal domain users from adding computers to the domain

How to stop normal domain users from adding computers to the domain

By default, standard domain users can add computers to the domain. This is a major security threat to any company.

To disable this go to ASDI Edit.

Default Naming Context > “DC=domain,DC=com” > Properties > Attribute Editor:

You need to modify this property to the value of 0.

ms-DS-MachineAccountQuota

Add comment