Title: Joining computers to a domain?

The ms-ds-machineAccountQuota (I believe) is a per domain setting. It allows any user in the domain to create 10 computer accounts in AD. I also think this is possibly restricted to the default computer container but am not sure. This really helps for roll outs because the end user can log on a sys-prepped machine give basic info (or none if scripted) and the computer account can be added to the domain without administrator intervention. You can increase that number through LDP or ADSI edit, I believe.

 

If this is an admin adding computer accounts make sure that you delegate that permission to the OU/container that the admin user needs access to.

 

Kevin

 

-----Original Message-----
From: Holmes,Raun M [mailto:[EMAIL PROTECTED]]
Sent: Thursday, October 03, 2002 11:23 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Joining computers to a domain?

 

Hello,

I have a support person who is getting a msg:  the following error occurred while attempting to join the domain"xxx.xxx.xxx":  you computer could not be joined to the domain, you have exceeded the max number of computer accounts you are allowed to created in this domain.  contact your admin to have this limit reset or increased.

How can we increase the counter for this user?

Thanks in advanced.

Raun Holmes
 

Reply via email to