How to fix “Exceeded the Maximum Number of Computer Accounts Allowed to Create in this Domain”

This is a quick post about a problem I saw in my lab today, basically computers were failing to join the domain, and to find out why, I manually attempted domain join using the account specified in the SCCM Task Sequence. When doing so I got the following error:

ms-DS-MachineAccountQuota

To fix this, on the domain controller, start up adsiedit.msc and browse to the DC=…  of your domain. Select it and right click, choose Properties.

Next, find the ms-DS-MachineAccountQuota notice that the default value is 10.

and change it to something larger, like 1000.

Job done !

 

This entry was posted in Uncategorized. Bookmark the permalink.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.