Cannot Join Domain You Have Exceeded

How to fix exceeded the maximum number of computer accounts allowed to create in this domain posted on february 21 2019 by ncbrady this is a quick post about a problem i saw in my lab today basically computers were failing to join the domain and to find out why i manually attempted domain join using the account specified in the sccm task sequence.

Cannot join domain you have exceeded. You have exceeded the maximum number of computer accounts you are allowed to create in this domain. There is not value on the user object that increments by one for each machine joined to the domain the only reference is on the computer object. Remember this is a public forum so never post private information such as email or phone numbers.

According to mskb articles 251335 and 314462 there are three methods to change this default. What does not happen. You computer could not be joined to the domain.

Your computer could not be joined to the domain. Contact your system administrator to have this limit reset or increased. To join a computer to the domain the user account must be granted create computer object permissions in active directory.

You have exceeded the maximum number of computer accounts you are allowed to create in this domain. You have exceeded the. Ensure that you have permissions to add computers to the domain or that you have not exceeded the quota limit defined by your domain administrator.

Contact your system administrator to have this limit reset or increased to resolve the problem you can run adsiedit msc on the domain controller and from there change the domain attribute ms ds machineaccountquota from 10 to something larger like 500. Make sure that you have permissions to add computers to the domain and that you have not exceeded the quota that is defined by your domain administrator. You have exceeded the maximum number of computer accounts you are allowed to create in this domain.

251335 domain users cannot join workstation or server to a domain this default was implemented to prevent misuse but can be overridden by an administrator by making a change to an object in active directory. Contact your system administrator to have this limit reset or increased.