If you are having trouble joining your FAC to your domain, the service
account may need elevated permissions. If you are not comfortable just
making it a Domain Administrator temporarily, I was able to confirm this
list of permissions as being necess...