You must delegate permission on specific domain / computer container. Right click and select DELEGATE CONTROL, then select the user and finally set the permission JOIN DOMAIN to true. There's a little problem, a user can only add 10 machine to domain, to get rid of this, follow these steps: