System Hardening ISM-1841 Current Unprivileged user accounts cannot add machines to the domain. Topic Microsoft Active Directory Domain Services account hardening Applicable to all History Mar 2023 Unprivileged user accounts cannot add machines to the domain. Thirteen new controls were added covering Microsoft AD DS account hardening.