Best practices dictate that one should not use a domain administrator account as a Domain Join Run As Account because the password can be encoded in plain text.
Instead, create a dedicated DomainJoin account for this specific use only.
Check out Richard Skinner’s quick and easy way.
Create A Dedicated Account To Join Computers To A Domain | Richard Skinner.