diff --git a/java/google/registry/flows/domain/DomainCreateFlow.java b/java/google/registry/flows/domain/DomainCreateFlow.java
index 96907b1fb..be148d61f 100644
--- a/java/google/registry/flows/domain/DomainCreateFlow.java
+++ b/java/google/registry/flows/domain/DomainCreateFlow.java
@@ -38,6 +38,8 @@ import static google.registry.flows.domain.DomainFlowUtils.verifyNotReserved;
 import static google.registry.flows.domain.DomainFlowUtils.verifyPremiumNameIsNotBlocked;
 import static google.registry.flows.domain.DomainFlowUtils.verifyUnitIsYears;
 import static google.registry.model.EppResourceUtils.createDomainRepoId;
+import static google.registry.model.eppcommon.StatusValue.SERVER_TRANSFER_PROHIBITED;
+import static google.registry.model.eppcommon.StatusValue.SERVER_UPDATE_PROHIBITED;
 import static google.registry.model.index.DomainApplicationIndex.loadActiveApplicationsByDomainName;
 import static google.registry.model.ofy.ObjectifyService.ofy;
 import static google.registry.model.registry.label.ReservedList.matchesAnchorTenantReservation;
@@ -85,6 +87,7 @@ import google.registry.model.domain.metadata.MetadataExtension;
 import google.registry.model.domain.rgp.GracePeriodStatus;
 import google.registry.model.domain.secdns.SecDnsCreateExtension;
 import google.registry.model.eppcommon.AuthInfo;
+import google.registry.model.eppcommon.StatusValue;
 import google.registry.model.eppinput.EppInput;
 import google.registry.model.eppinput.ResourceCommand;
 import google.registry.model.eppoutput.CreateData.DomainCreateData;
@@ -276,24 +279,29 @@ public class DomainCreateFlow implements TransactionalFlow {
     if (!feesAndCredits.getEapCost().isZero()) {
       entitiesToSave.add(createEapBillingEvent(feesAndCredits, createBillingEvent));
     }
-    DomainResource newDomain = new DomainResource.Builder()
-        .setCreationClientId(clientId)
-        .setPersistedCurrentSponsorClientId(clientId)
-        .setRepoId(repoId)
-        .setIdnTableName(validateDomainNameWithIdnTables(domainName))
-        .setRegistrationExpirationTime(registrationExpirationTime)
-        .setAutorenewBillingEvent(Key.create(autorenewBillingEvent))
-        .setAutorenewPollMessage(Key.create(autorenewPollMessage))
-        .setLaunchNotice(hasClaimsNotice ? launchCreate.getNotice() : null)
-        .setSmdId(signedMarkId)
-        .setDsData(secDnsCreate == null ? null : secDnsCreate.getDsData())
-        .setRegistrant(command.getRegistrant())
-        .setAuthInfo(command.getAuthInfo())
-        .setFullyQualifiedDomainName(targetId)
-        .setNameservers(command.getNameservers())
-        .setContacts(command.getContacts())
-        .addGracePeriod(GracePeriod.forBillingEvent(GracePeriodStatus.ADD, createBillingEvent))
-        .build();
+    DomainResource newDomain =
+        new DomainResource.Builder()
+            .setCreationClientId(clientId)
+            .setPersistedCurrentSponsorClientId(clientId)
+            .setRepoId(repoId)
+            .setIdnTableName(validateDomainNameWithIdnTables(domainName))
+            .setRegistrationExpirationTime(registrationExpirationTime)
+            .setAutorenewBillingEvent(Key.create(autorenewBillingEvent))
+            .setAutorenewPollMessage(Key.create(autorenewPollMessage))
+            .setLaunchNotice(hasClaimsNotice ? launchCreate.getNotice() : null)
+            .setSmdId(signedMarkId)
+            .setDsData(secDnsCreate == null ? null : secDnsCreate.getDsData())
+            .setRegistrant(command.getRegistrant())
+            .setAuthInfo(command.getAuthInfo())
+            .setFullyQualifiedDomainName(targetId)
+            .setNameservers(command.getNameservers())
+            .setStatusValues(
+                registry.getDomainCreateRestricted()
+                    ? ImmutableSet.of(SERVER_UPDATE_PROHIBITED, SERVER_TRANSFER_PROHIBITED)
+                    : ImmutableSet.<StatusValue>of())
+            .setContacts(command.getContacts())
+            .addGracePeriod(GracePeriod.forBillingEvent(GracePeriodStatus.ADD, createBillingEvent))
+            .build();
     entitiesToSave.add(
         newDomain,
         ForeignKeyIndex.create(newDomain, newDomain.getDeletionTime()),
diff --git a/javatests/google/registry/flows/domain/DomainCreateFlowTest.java b/javatests/google/registry/flows/domain/DomainCreateFlowTest.java
index 27dab219e..1b6dbfda2 100644
--- a/javatests/google/registry/flows/domain/DomainCreateFlowTest.java
+++ b/javatests/google/registry/flows/domain/DomainCreateFlowTest.java
@@ -17,6 +17,9 @@ package google.registry.flows.domain;
 import static com.google.common.io.BaseEncoding.base16;
 import static com.google.common.truth.Truth.assertThat;
 import static google.registry.model.domain.fee.Fee.FEE_EXTENSION_URIS;
+import static google.registry.model.eppcommon.StatusValue.OK;
+import static google.registry.model.eppcommon.StatusValue.SERVER_TRANSFER_PROHIBITED;
+import static google.registry.model.eppcommon.StatusValue.SERVER_UPDATE_PROHIBITED;
 import static google.registry.model.ofy.ObjectifyService.ofy;
 import static google.registry.pricing.PricingEngineProxy.isDomainPremium;
 import static google.registry.testing.DatastoreHelper.assertBillingEvents;
@@ -1879,6 +1882,40 @@ public class DomainCreateFlowTest extends ResourceFlowTestCase<DomainCreateFlow,
     runFlow();
   }
 
+  @Test
+  public void testSuccess_domainCreateRestricted_serverStatusSet() throws Exception {
+    persistContactsAndHosts();
+    persistResource(
+        Registry.get("tld")
+            .asBuilder()
+            .setDomainCreateRestricted(true)
+            .setReservedLists(
+                persistReservedList(
+                    "reserved",
+                    "example,NAMESERVER_RESTRICTED,"
+                        + "ns1.example.net:ns2.example.net:ns3.example.net"))
+            .build());
+    doSuccessfulTest();
+    assertThat(reloadResourceByForeignKey().getStatusValues())
+        .containsExactly(SERVER_UPDATE_PROHIBITED, SERVER_TRANSFER_PROHIBITED);
+  }
+
+  @Test
+  public void testSuccess_domainCreateNotRestricted_serverStatusNotSet() throws Exception {
+    persistContactsAndHosts();
+    persistResource(
+        Registry.get("tld")
+            .asBuilder()
+            .setReservedLists(
+                persistReservedList(
+                    "reserved",
+                    "example,NAMESERVER_RESTRICTED,"
+                        + "ns1.example.net:ns2.example.net:ns3.example.net"))
+            .build());
+    doSuccessfulTest();
+    assertThat(reloadResourceByForeignKey().getStatusValues()).containsExactly(OK);
+  }
+
   @Test
   public void testSuccess_eapFeeApplied_v06() throws Exception {
     setEppInput("domain_create_eap_fee.xml", ImmutableMap.of("FEE_VERSION", "0.6"));