This I a post about using a normal Ad user only member od Domain Users to Domain Join a Device doing OSD.
First create a user called CM_DJ:
Remember to set the:
“User cannot change password” and “Password never expires”
Now you are ready to Delegat control by using the Wizard in “Active Directory Users and Computers”
Start by creating a OU for your devices
Start the Delegate Control Wizard
Click Next
Click Add
Find the user you just created
Create a custom task to delegate
Select “only the following objects in the folder” – Computer objects
Select the properties as shown in the picture
Click finish
Now you can use the CM_DJ user to domain to your OU from MDT or SCCM