Join computer to domain without being administrator

Jazmin Gutierrez · Guest

I assign special permissions to IT users that are NOT administrators so as
to let them join client computers to my domain. For this, I set the
"Create/Delete Computer Objects -- This object and all child objects" in
ADUC.

Everything works fine until they have to re-join a computer: they have to go
to ADUC, delete the computer object, and rejoin. BUT, when the computer had
shared printers they get a "the object is a container" warning and cannot
delete computer.

What another permission should I set?
Thanks!