Will1
New Contributor III
  1. Ensure that CNO$ account has Full Control on the CNO and The computers container;
  2. Add CNO$ account (CNO computer object) in Local Admins group;
  3. Finally, add CNO$ in Domain Admins group.

Regards,

Willjoe