The
ms-ds-machineAccountQuota (I believe) is a per domain
setting. It allows any user in the domain to create 10 computer accounts in AD.
I also think this is possibly restricted to the default computer container but am not sure. This really helps for roll outs because the end
user can log on a sys-prepped machine give basic info (or none if scripted) and
the computer account can be added to the domain without administrator
intervention. You can increase that number through LDP or ADSI edit, I believe. If this is an admin adding computer
accounts make sure that you delegate that permission to the OU/container that
the admin user needs access to. Kevin -----Original Message----- Hello, I have a support person who is getting a msg:
the following error occurred while attempting to join the
domain"xxx.xxx.xxx": you computer could not be joined to the
domain, you have exceeded the max number of computer accounts you are allowed
to created in this domain. contact your admin to have this limit reset or
increased. How can we increase the counter for this user?
Thanks in advanced. Raun Holmes |
Title: Joining computers to a domain?
- [ActiveDir] Joining computers to a domain? Holmes,Raun M
- RE: [ActiveDir] Joining computers to a domain? Darren Sykes
- Re: [ActiveDir] Joining computers to a domain? Sullivan, Kevin
- Re: [ActiveDir] Joining computers to a domain? Tony Murray
- RE: [ActiveDir] Joining computers to a domain? Holmes,Raun M
- RE: [ActiveDir] Joining computers to a domain? Puckett, Richard
- RE: [ActiveDir] Joining computers to a domain? Sullivan, Kevin
- RE: [ActiveDir] Joining computers to a domain? Puckett, Richard
- RE: [ActiveDir] Joining computers to a domain? Sullivan, Kevin
- RE: [ActiveDir] Joining computers to a domain? Puckett, Richard
- RE: [ActiveDir] Joining computers to a domain? Sullivan, Kevin
- RE: [ActiveDir] Joining computers to a domain? Holmes,Raun M