Changing The Default ms-DS-Machine-Account-Quota Attribute

Do you want to prevent non-admins from joining computer to the domain?  Be default Microsoft allows authenticated users to join 10 computer to the domain, here’s how to change that.

  2. Right click your domain name and select ‘Properties’
  3. find ms-DS-MachineAccountQuota an change to 0