Controlling Permissions to Create Computer Accounts

To join a computer to an Active Directory domain, four conditions must be met:

§ A computer object must exist Directory service.

§ You must have the appropriate permissions In the computer object, allowing you to Added the name of the physical computer Matching objects in AD DS Domain.

§ You must be a local one Administrator of the computer group. This allows you to change your computer Domain or workgroup membership. 

§ Not exceed you can add the maximum number of domain computer accounts. By default, users can add up to ten computers in the domain; This amount is called the computer account quota And it is controlled by MS -DS- MachineQuota value. You can change this value ADSIEdit snap.