# Machine Account Quota

This module retrieves the MachineAccountQuota domain-level attribute. It's useful to check this value because by default it permits unprivileged users to attach up to 10 computers to an Active Directory (AD) domain.

```
cme ldap <ip> -u user -p pass -M maq
```

<figure><img src="https://3800235601-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fx4pJgNiBOMLG3QHRPFAy%2Fuploads%2F1tf1RKOrwI9RWLPMDhMm%2Fimage.png?alt=media&#x26;token=9a6fd959-b505-4da8-be6c-3b5fd080007e" alt=""><figcaption></figcaption></figure>
