By default, standard domain users can add computers to the domain. This is a major security threat to any company.
To disable this go to ASDI Edit.
Default Naming Context > DC=domain,DC=com > Properties > Attribute Editor:
You need to modify this property to the value of 0.
ms-DS-MachineAccountQuota