Re: Adding Computers to the Domain (AD)

From: bonehead (sendmenospam_at_here.net)
Date: 03/16/05 

Date: Wed, 16 Mar 2005 07:50:53 -0800

Miha Pihler [MVP] wrote:
> Hi,
>
> By default any user (ordinary user) that has valid username and password to
> domain (authenticated user) can add up to 10 computers to domain.

Pardon me for butting in, but I'm an AD newbie and I'm about to set up
my first test environment. This certainly seems to be a major hole in
security. Is there some Group Policy setting that can prevent users from
being able to do this at all, i.e., you can only log in to the domain
via a machine that is already part of the domain?