If you want to do it anyway, why not simply add "domain users" domain group to the local admin group on every computer? You can even script this and be done with it in a couple of minutes.

I noticed that one of my users had somehow joined his new computer to our domain. How was this possible? I thought only domain admins could join a workstation to a domain.Since it was a new ...