Best practices dictate that one should not use a domain administrator account as a Domain Join Run As Account because the password can be encoded in plain text.
Instead, create a dedicated DomainJoin account for this specific use only.
Check out Richard Skinner’s quick and easy way.
Create A Dedicated Account To Join Computers To A Domain | Richard Skinner.
![Partners](https://i0.wp.com/www.nizmotek.com/wp-content/uploads/2021/12/Microsoft-logo-white-400x400-11.jpg?resize=1126%2C550&ssl=1)