Adding a machine to the domain using an alternate token

I work for the Federal Government, and we use alternate tokens for our
elevated privilege accounts. Currentlt, we do not know of a way to allow our
Level 2 desktop support technicians add a new workstation to the domain
without using a username/password combination. The alternate tokens are tied
to their elevated accounts and work for typical runas functions, but we can't
make it work to add computers to our domain.

Any assistance would be great!