Gets a list of AD computers that were created by regular users exercising their default right to create up to 10 computer accounts in an AD domain

Get-MachineAccountQuotaUsers.ps1

$machineAccountQuotaComputers = Get-ADComputer -filter {ms-DS-CreatorSID -ne "$null"} -Properties ms-DS-CreatorSID,Created

foreach ($machine in $machineAccountQuotaComputers) {
    $creator = $null
    try {
        $creator = [System.Security.Principal.SecurityIdentifier]::new($machine.'ms-DS-CreatorSID').Translate([System.Security.Principal.NTAccount]).Value
    }
    catch {
        $creator = $machine.'ms-DS-CreatorSID'
    }

    New-Object psobject -Property @{
        Name = $machine.Name
        DistinguishedName = $machine.DistinguishedName
        Creator = $creator
        Created = $machine.Created
    } | Select-Object Name,DistinguishedName,Creator,Created | Sort-Object -Property Created
}

Por favor, me podrías indicar si se puede realizar un clear al atributo ms ds creatorsid de un host ya que desde el adsedit no me permite

Por favor, me podrías indicar si se puede realizar un clear al atributo ms ds creatorsid de un host ya que desde el adsedit no me permite

I'm not sure, sorry.

Gracias por la pronta respuesta si lo encuentro te comparto saludos