An Engineers Notebook

How to stop normal domain users from adding computers to the domain

By default, standard domain users can add computers to the domain. This is a major security threat to any company.

To disable this go to ASDI Edit.

Default Naming Context > “DC=domain,DC=com” > Properties > Attribute Editor:

You need to modify this property to the value of 0.

ms-DS-MachineAccountQuota

Leave a Reply

Your email address will not be published.