Hello, How to restrict anyone from creating computer accounts in default computer container, when joining domain. I have removed "Authenticated users" group from Computer>Security properties. I have removed from GPO as "Add workstaions to domain" still it doesn't apply. Basically, i want to setup in such a way that computer account has to be precreated in different OU as per Departments, and not in default container. If Computer account does not exist, then it should error out. This is on Win2003 AD. Thanks Sunny