Hello
I have win 2012 R2 server with AD DS, in default domain policy, computer configuration/local polocies/user rights assignment I choose only domain admins, but I can add computers to domain with any user I create without member of any admins group, also I didn't Delegate control to any users or groups