In practical applications, we will encounter this situation, we let the client join the domain of the authorized account is a dedicated account, this account is generally not under any permissions, because if the script to join the domain, the information of this account will be written in the domain-joined script.
However, when the number of workstations using AD users to attempt to join a domain exceeds "10", the following prompt appears: Prompts the maximum value of a computer user that is allowed by this domain, please join the system administrator. So how do you solve the problem?
First install "Support Tools" tool on DC above, click Start-Run, enter "Adsiedit.msc", expand "Domain [xxxxxx]" in pop-up window, navigate to "dc= xxxxx", right click "attribute", In the pop-up Properties window to find "Ms-ds-machineaccountquota", double-click the edit to change the default "10" to "N" (by default, all users can add 10 computers to the domain, n is the number we want to set).
However, before you make this change, you should add the account number of the ordinary user to the authentication Users group! Before you can achieve your goal! Otherwise, it's futile!
This article is from the "Microsoft Technical Topic" Blog, please be sure to keep this source http://nickzp.blog.51cto.com/12728/1189718