Back to Basics: Permissions needed in AD to “mess” with computers during OS Deployment
From the archive (2012). Written for the tools of the time, so some details may be out of date.
Mikael Nystrom created a nice post on what permissions are needed in Active Directory for OSD.