Set user permission to join the computer to the domain without domain admin rights.
Set delegate right to user can join a computer to the domain controller without admin right.
- Open "Active Directory Users and Computers".
- Right-click on the container that you want to adda computer to. And and select "Delegate Control".
- To continue. Click next.
- Click "Add" to select users and groups.
- Select a user to delegate.
- Click "Next".
- Select "Create a custom task to delegate". Click "Next".
- Select "Only the following objects in the folder"
- Check "Computer object"
- Check "Create selected objects in the folder" and click "Next"
- Check "Create All Child Objects" and click "Next"
- Click "Finish"
Ref: https://community.spiceworks.com/t/minimum-permission-needed-to-join-computer-to-domain/47862/2