What many administrators do not know:
Authenticated domain users can add up to 10 new computer objects to the domain by default.
In some environments this may not be wanted though for security reasons.
How to prevent that users can add computer objects?
And so the domain becomes somewhat more secure. 🙂