How to prevent computers and users not registered in it from joining and working in a Windows Server 2012 and higher domain?

Question

Windows Server

I welcome everyone! Help advice, in general the situation is as follows:
in Windows Server 2012 R2, I raised a domain controller, created a domain, created an organizational unit - organizational unit, OU, in OU - created sections for computers and for user accounts, in them, respectively, I created computer names and user accounts that should be in the domain, so I need that only computers with such names and accounts can be joined to the domain and located in it, if the computer has an unnamed name in the OU of the domain, then it should be denied joining and working in the domain, as well as if the computer has a wound up in OU domain name but the user on it works under an account that is not registered in the OU of the domain, then he should also be denied entry and work in the domain, tried using domain group policies, nothing happens.
For example, computer names are set up in the domain - Comp1, Comp2, Comp3
and user accounts - User1, User2, User3
i.e. I need only computers with such usernames and user accounts to be allowed to join and work in the domain

Answer 1

Oh, a new generation of admins has grown up, who are firmly convinced that only an admin or (who heard about delegation) some special special users with granted rights can enter a computer into a domain by default.
How to prevent a user from entering a PC into a domain?

Answer 2

1. When you add a new computer to the domain, a new account is created for the computer. If such a name already exists in the domain, there will probably be a conflict. In this case, it is unlikely that the computer will be added to the domain at all.
2. Only the admin can add computers to the domain.
Your Wishlist seems a little strange. It looks like you are trying to solve some problems in the wrong way. If you wrote the ultimate goal, perhaps you would be prompted here to the right solution. In the meantime, your wishlists do not seem to be implemented by standard means.
PS: I haven't used AD for a long time

Answer 3

A domain user with the appropriate rights must join a computer to a domain. Maybe just shift the decision of the issue to such a user? And he himself will figure out which computer can be entered and which is not.

Answer 4

Give an example why this might be needed?
Only a user with the appropriate rights can add a computer to the domain.
And without an account in the domain, access to domain resources cannot be obtained.