Adding Computer Accounts

[John]

What steps do I need to take to allow
users other than the Domain Admins group
the rights to add computer accounts to the
domain?


Thanks

 

[Jcarr MSFT]

Hello John,

By default all users are part of the Authenticated Users group and by
default can add up to 10 computer accounts to the domain. Of course domain
Admins do not have this limitation. To work around this limit, you can
pre-create the computer accounts in the AD, delegate the authority for
Authenticated Users to add computers to the domain or modify an attribute
in the AD called ms-DS-MachineAccountQuota. Modifying the
ms-DS-MachineAccountQuota is the easiest of these options.

For more information, please see the following article:

Q251335 - Domain Users Cannot Join Workstation or Server to a Domain

http://support.microsoft.com/?id=251335


Thanks,

james