How can force to create a computer object before add the computer to a domain

Question

Hi Team,

I remember when i was working in a company that before we can join a computer to the domain, the computer object must be create ahead in active directory.

How can Force to create a computer object before join the computer to a domain.

What setting is required to enable in GPO to enforce this.

Thanks..

Answer 1

You can use PowerShell
https://learn.microsoft.com/en-us/powershell/module/activedirectory/new-adcomputer?view=windowsserver2019-ps

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

before we can join a computer to the domain, the computer object must be create ahead in active directory.

There is no such requirement. The computer account will be created automatically during domain join process. If you wanted to do so anyway you can use PowerShell
https://learn.microsoft.com/en-us/powershell/module/activedirectory/new-adcomputer?view=windowsserver2019-ps

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 3

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 4

By default, an authenticated user without domain admins or delegated permissions can join up to 10 computers in a domain. This value can be changed using the attribute ms-DS-MachineAccountQuota on the domain.

The best option is what DSPatrick suggest

Answer 5

Hi thanks for the responses, but we need to enforce this policy that we mansion above because in sometimes the helpdesk team join computer to the domain without change the default name of a computers, and additionally each time the helpdesk team join a computer to the domain we need to move the object to the correct OU in order to take the GPO policies.