WDS - client doesn't join the domain

[Sonic3]

So, after a LOT of trial and error, I finally have a refined, unattended deployment process of Windows 10 using WDS and answer files. Everything works except for the very last bit - the PC fails to join the domain, for no apparent reason. I've checked the WDS logs; nothing there. I've Googled the issue and made sure the right boxes are ticked in the server properties window, made sure the user account used by the WDS unattend file has permissions to join a PC to the domain, and prestaged the PC in AD. I'm stuck! What could I be doing wrong?

[mavhc]

You could be trust MS to fix their own bugs. If you UEFI boot to WDS for some reason it adds a deny permission to the computer AD object. Check the security of the new computer AD object, change deny to allow.