By default, domain user can add 10 computers into domain, this is by design, we may disable it as below:
After that, we may follow https://support.microsoft.com/en-us/kb/932455
Reference:
Delegate IT (only) to join computer into domain
原文：http://alphabook.blog.51cto.com/232573/1878163