Delegation
Set ms-DS-MachineAccountQuota to 0 and delegate joins
Stop any domain user from creating computer accounts: set ms-DS-MachineAccountQuota to 0, find who relies on it, and delegate domain join to an OU.
Foundation
Guides tagged
← Back to all guides