How to stop all authenticated users from adding computers



Currently anybody who has a user account can add computers to the domain.
I've been reading that there is a default config that allows everyone to add
10 computers. I have went and changed the "ms-DS-MachineAccountQuota" to 0
and that didn't fix it. Any help would be appreciated. Thanks!
.



Relevant Pages

  • Re: domain user cant logon. help
    ... > configured in the user account in Active Directory Users and Computers under ... > account/log on to next to the logon hours tab or use net user username on the domain ... what about this PC's config. ...
    (microsoft.public.win2000.security)
  • Re: Folder Sharing Security
    ... I'll end this thread here and do some reading. ... "Malke" wrote: ... The answer all depends on whether this your computers are in an office ... only one user account to maintain, if you create matching user accounts you ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Allowing a domain user account (specify) to add workstation to Windows 2000 domain (SP4)
    ... Please no e-mails, any questions should be posted in the NewsGroup ... I see that I can create a domain user account, ... Create the gpo in the ou where the Computers reside, ...
    (microsoft.public.win2000.active_directory)
  • Re: Re: How Our Brains Ignore Unpleasant Facts was: Re: The Reasonable
    ... reading last year and it is quite persuasive. ... worked ther on weekends, worked in closed shops, open shops, ... And yet you know so little about computers that you claimed you new ... solving.....of course not your a wired head evo. ...
    (talk.origins)
  • Re: Allowing a domain user account (specify) to add workstation to Windows 2000 domain (SP4)
    ... What is additional member of built-in group so a domain user account will ... Create the gpo in the ou where the Computers reside, ... group (The same group as in the restricted group used above?). ...
    (microsoft.public.win2000.active_directory)

Quantcast