Есть еще вариант с увеличением количества возможных добавляемых в домен ПК. Но оставлять это разрешение-не самая конструктивная идея, лучше напрягитесь и настройте делегирование.

MSKBRun Adsiedit.msc as an administrator of the domain.
Expand the Domain NC node. This node contains an object that begins with "DC=" and reflects the correct domain name. Right-click this object, and then click Properties.
In the Select which properties to view box, click Both.
In the Select a property to view box, click ms-DS-MachineAccountQuota.
In the Edit Attribute box, type a number. This number represents the number of workstations that you want users to be able to maintain concurrently.
Click Set, and then click OK.

MSKB1. From the Active Directory Users and Computers snap-in, click Advanced Features on the View menu so that the Security tab is exposed when you click Properties.
2. Right-click the Computers container, and then click Properties.
3. On the Security tab, click Advanced.
4. On the Permissions tab, click Authenticated Users, and then click View/Edit.

NOTE: If the Authenticated Users group is not listed, click Add and add it to the list of permission entries.
5. Make sure the This object and all child objects option is displayed in the Apply onto box.
6. From the Permissions box, click to select the Allow check box next to the Create Computer Objects and Delete Computer Objects ACEs, and then click OK
Надеюсь, не составит труда адаптировать данное решение для своего варианта.