While studying for my MCITP, I came across this little gem: When an account is not prestaged, Windows will, by default, allow any authenticated user to create a computer object in the default computer ...

An authenticated user is one that needs a client access license to a server (or servers). So, yes, the user has been authenticated by a domain controller.<P>God damn MS licensing has rotted my brain.