Disable Authenticated User from beeing able to join computers to the domain

One of the things I still can’t understand is why users should be allowed…