How to Prevent Standard Users from Joining Computers to an Active Directory Domain

Introduction

Learn how to block standard users from joining workstations or servers to an active directory domain. In this example, I show you how to create a security group, delegate permissions to that group so that they can create computer objects within an active directory, update the default domain controller group policy to only allow domain admins and the newly created security group to add devices to the domain, and reduce the number of devices a user account can add to the domain from 10 to 0 using ADSI edit.

Video