Apparently you need the following to connect the ACS to the AD Domain -
Add workstations to domain user right in corresponding domain.
• Create Computer Objects or Delete Computer Objects permission on corresponding
computers container where ACS machine's account is precreated (created before joining
ACS machine to the domain).
I am being asked by the AD guy why we need this sort of permission
Does anyone Know ?