Changing The Default ms-DS-Machine-Account-Quota Attribute

Do you want to prevent non-admins from joining computer to the domain? ┬áBe default Microsoft allows authenticated users to join 10 computer to the domain, here’s how to change that.

  2. Right click your domain name and select ‘Properties’
  3. find ms-DS-MachineAccountQuota an change to 0