How can force to create a computer object before add the computer to a domain

Question

Hi Team,

I remember when i was working in a company that before we can join a computer to the domain, the computer object must be create ahead in active directory.

How can Force to create a computer object before join the computer to a domain.

What setting is required to enable in GPO to enforce this.

Thanks..

Answer 1

thanks for the suggestion, but this is no a solution for me, as mentioned:
I remember when i was working in a company (mid 2013) that before we can join a computer to the domain, the computer object must be create ahead in active directory.

I think that must be an option in GPO - Domain Controller Policy that we can use to enforce this

Answer 2

AFAIK, there is no option in Group Policy to create or enforce the creation of a computer account in case it does not exist.

The policy you may think about is the following:
Computer Configuration / Windows Settings / Security Settings / Local Policies / User Rights Assignment / Add workstations to domain
This policy will define who is able to add computers to the domain. The process of creating the computer account is not a GPO setting.

What you can do is using a PS script like DSPatrick mentioned to create computers objects in the correct OU before the computer will join the domain. This is probably the best option in case you don't want to delegate permission on a specific OU.

hth