Minimum permission needed for an a/c to join Workstations to AD Do

I have made up some OU Management accounts who can manage accounts under
particular OUs. Also, I would like these accounts capable to join
workstations to AD domain. However, I don't want to grant these OU management
accounts with Administrators rights.

What has been done:
In Domain Controller Security Policy, Security Settings->Local
Policies->User Rights Assignment, already included these OU management
accounts into "Add workstations to domain". However, still no luck. Do I miss
out something?

Thanks a lot!
.

Relevant Pages

  • Logical access controle to network segments and boxes
    ... We are currently setting up a security management system (or, ... I want to use AAA where possible and local accounts where needed. ... Reporting on usage of these accounts is an issue, since central logging ...
    (Security-Basics)
  • Writing a logical access control document....
    ... We are currently setting up a security management system (or, ... tools and so on and will focus on an admin account per admin. ... I want to use AAA where possible and local accounts where needed. ... Reporting on usage of these accounts is an issue, since central logging is ...
    (comp.security.misc)
  • Re: P&L Question
    ... It is many years since I worked in management accounts but I was roped into ... Do you mean that you have a management charge and filing fee as ...
    (uk.finance)
  • Re: external server authentication and licensing
    ... have any trouble with active directory, ... from having all the accounts in active directory... ... ongoing management of large numbers of accounts in the FM files ... SBS to Standard server, and purchasing the External Connector license, ...
    (comp.databases.filemaker)
  • FOREX MANAGED MINI ACCOUNT
    ... Accounts with NO Management Fee! ... Forex Chart Room so you can watch the real time trading ...
    (soc.culture.vietnamese)