What permissions do I need to join the domain?

Use the administrator's account to join the computer to the domain. Can I use another account to join the domain?

In the earliest join a machine to the domain, (not the later login domain), not to be verified to join. The permissions in the figure, at least what permissions?

method:
in DC, Local Policies - User Rights Assignment inside - add workstations inside with an account can be a domain
Method Two:
joined to a domain Permissions, every ordinary user has ten chances. Of course, the administrator has no restrictions. If you want non-administrators to have permission to join the domain, you can set up delegation in AD.
Method 3:
Most Fortunately, the permission of the ordinary user plus the domain is limited, and only the specific user has the authority to add the domain, which is convenient for management. Since it is a domain policy, you can define a specific user in the Computer Configuration\\Windows Settings\\Security Settings\\User Rights Assignment\\Domains field.
Method 4:
Any ordinary user can put himself Computer joins domain
but can only join 10 times
By default, authenticated users on domain controllers have the right to add computers to the domain, up to the maximum number of authenticated users can be created in the domain 10 computer accounts.
but it is not in the default domain policy modifications, but DC configuration partition, install support tools to modify

below this place with adsiedit.msc is to modify the machine account number
this limit
The GUI tool is under the system CD support

Warning: Error editing the Active Directory property data using the command tool or ADSI EDIT will result in irreparable and unrecoverable consequences! ! Please be careful with use! ! !
-----
dsmod quota
Modifies the attributes of one or more existing quota specifications in the directory.

Syntax
dsmod quota QuotaDN ...[-qlimit Value] [-desc Description] [{-s Server