Adding PC's to a Domain

[KevinBugg]

Domain users are able to add 10 machines to the domain. I have used Adsi Edit to restrict this to 0 so in theory Domain Users can not add machines to the domain. I then plan to use delegate control in Active Directory.

However, existing domain users can still add / remove machines from the domain even after this change but newly created users cant. How do i get this setting to replicate to existing users? Seems a bit bizarre that it doesn't automatically.

Thanks

Kev

 

[FaiTHLeSS]

Use group policy