方案1: Delegate rights

1) Active Directory Users and Computers
2) Right-click the "container" under which you want the "computers added"
3) Delegate Control
4) adding User
5) Create custom task to delegate
6) a. Only the following objects in the folder
   b. Computer objects
   c. Create selected objects in this folder
   d. Create all child object
7) Finish

方案2: Default Domain Group policy

1) Computer Configuration / Windows Settings / Security Settings / Local Policies / User Rights Assignment
2) User Rights Assignment
3) Add workstations to Domain
4) Define these policy settings
5) Add User
6) Apply