Would you like to learn how to change the value of the Active Directory’s attribute named MS-DS-MachineAccountQuota? In this tutorial, we are going to show you how to use Powershell to change the value of MS-DS-MachineAccountQuota on the Active Directory.

• Windows 2012 R2
• Windows 2016
• Windows 2019
• Windows 10
• Windows 7

Equipment list

The following section presents the list of equipment used to create this tutorial.

As an Amazon Associate, I earn from qualifying purchases.

Windows Related Tutorial:

On this page, we offer quick access to a list of tutorials related to Windows.

Tutorial Windows – Change the value of MS-DS-MachineAccountQuota

By default, each authenticated user is allowed to add 10 computers to the domain.

This limitation is imposed by the Active Directory attribute named MS-DS-MachineAccountQuota.

As an Administrator, start an elevated Powershell command-line.

Windows 10 - powershell elevated

Verify the value of the attribute named MS-DS-MachineAccountQuota.

Copy to Clipboard

Here is the command output.

Copy to Clipboard

Change the value of the Active Directory’s attribute named MS-DS-MachineAccountQuota.

Copy to Clipboard

Display the value of the attribute named MS-DS-MachineAccountQuota.

Copy to Clipboard

Here is the command output.

Copy to Clipboard

In our example, each authenticated user account will be able to add 100 computers to the domain.