Stop users joining machines to a windows domain.

[vantageit]

Hello all,

Would someone be able to help me.

I would like to stop the average user from being able to add machines to a windows domain.

Thanks for any help.

[FAT64]

In order to join a computer to a Windows domain, you need the username and password of a domain administrator account, so just don't tell them!

[jondercik]

That is incorrect FAT64. Out of the box ordinary users can join up to 10 workstations to the domain. If you want to prevent them from joining workstations, you will have to change the default container the computer accounts are created in. Google is your friend.

[vantageit]

Thank you for your responses. I will Google it.