I have successfully set up DSfW in my good old eDirectory tree and tested
that workstations can join the domain. Now I'm facing the task of joining
all our 350 workstations to domain. Being a lazy person that I am and
considering the amount of work involved, I would like to delegate this task
to our PC techs, but I have a security concern. From the docs I see that
the user account that can be used for joining workstations to domain can be
either the Administrator account that got created during DSfW install, or
account that has administrative rights to the name-mapped container. Giving
out either of these to the PC techs is not the idea that I like. Is there
really no other way?

Toomas Aas