PowerView-based PowerShell query pattern that reads the Active Directory domain object's ms-DS-MachineAccountQuota attribute. The value is a configured computer-account quota and one input to assessing computer-account creation or join rights; it does not by itself establish whether a particular user can create an account.
PowerShell
RESTRICTED_ACCESS_BLUR_MARKER