This I a post about using a normal Ad user only member od Domain Users to Domain Join a Device doing OSD.

First create a user called CM_DJ:

User

Remember to set the:

“User cannot change password” and “Password never expires”

User2


 

Now you are ready to Delegat control by using the Wizard in “Active Directory Users and Computers”

Start by creating a OU for your devices

Delegate1

Start the Delegate Control Wizard

Delegate2

Click Next

Delegate3

Click Add

Delegate4

Find the user you just created

Delegate5

Create a custom task to delegate

Delegate6

Select “only the following objects in the folder” – Computer objects

 

Delegate7

Select the properties as shown in the picture

Delegate8

Click finish

Delegate9

Now you can use the CM_DJ user to domain to your OU from MDT or SCCM