Adding a machine to the domain using an alternate token

[Guest Bill The Cat]

I work for the Federal Government, and we use alternate tokens for our

elevated privilege accounts. Currentlt, we do not know of a way to allow our

Level 2 desktop support technicians add a new workstation to the domain

without using a username/password combination. The alternate tokens are tied

to their elevated accounts and work for typical runas functions, but we can't

make it work to add computers to our domain.

 

Any assistance would be great!