Prevent that authenticated users can add computers to the domain/network

I didn’t know before that actually every authenticated user can add up to 10 computers to the domain  by default. This is a security issue and should be prevented.

Follow the steps to do so:
1. Open ADSI Editor
2. Click with the right mouse button on ADSI Editor and make a default connection
3. Click with the right mouse button on the domain / properties
4. Change the value for ms-DS-MachineAccountQuota to 0

admin on July 15th 2009 in Windows Server

No Comments »

Trackback URI | Comments RSS

Leave a Reply

Check out new movies online website. Download and buy movies now.