Solved

How do I overcome the Maximum Number of Computer Accounts a "User" can create on Domain?

Posted on 2004-03-24
7
2,279 Views
Last Modified: 2010-07-27
I have a Windows Server 2003 Domain with over 500 file sharing users and want 1 ID that can add their machine to the domain.  Currently the one user ID (no admin rights) can only add 10 computer accounts and then get the error:

Your computer could not be joined to the domain because the following error has occured:

Your computer could not be joined to the domain.  You have exceeded the maximum number of computer accounts you are allowed to create in this domain.  Contact your system administrator to have this limit reset or increased.

My question is where is this limit reset/increase located so I may reset/increase it?
0
Comment
Question by:semarch
  • 4
  • 2
7 Comments
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 10670008
Create a GPO and place your user in it..  Then configure this setting:

Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Add computer to the domain
0
 

Author Comment

by:semarch
ID: 10670081
No good.

Still have the 10 computer account limitation.
I already added the ID to the User Rights Assignment under Local Policies.

Really need to know how to increase/reset the limitation.

BTW: What is a GPO?  I don't recognize that.
0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 10670193
GPO = Group Policy Object..   You create these within the ADUC (Active Directory Users and Computers)..   If you do this and place your user in there, it should give them the proper rights to add computers to a domain..

EF
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 10670204
OH..  the ADUC policy is placed on your Domain Controller, not in the local computer policy..

0
 

Author Comment

by:semarch
ID: 10670221
0
 
LVL 40

Expert Comment

by:Fatal_Exception
ID: 10670261
Very Good..  go to Community Support and you can ask for a refund..  :)

FE
0
 
LVL 2

Accepted Solution

by:
Lunchy earned 0 total points
ID: 10672040
Closed, 125 points refunded.
Lunchy
Friendly Neighbourhood Community Support Admin
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This Micro Tutorial will teach you how to censor certain areas of your screen. The example in this video will show a little boy's face being blurred. This will be demonstrated using Adobe Premiere Pro CS6.
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now