Changing default number of machines users can add to a domain

I ran into an issue at work today where a specific user couldn’t add a machine to the domain, but had been able to previously. A little research and I realized that by default, each user can only join up to 10 machines to the domain. I am not sure why there would be a limit like this (I would expect 0 or infinite), but here is how to increase the number (taken from

  1. Start ADSI Edit (start/run/adsiedit.msc)
  2. Expand out the Domain node, right click on DC=,DC=com and select properties
  3. Scan down to ms-DS-MachineAccountQuota
  4. Modify the value as appropriate, or clear the value to remove the limit entirely.

Leave a Reply