How to do domain-join with IPSec?

How can new computers join the domain when the Domain controller requires IPsec?

I could think of ways if the authentication method Pre-shared key was used or if a certificate was used but what if the authentication methodKerberos V5 is used? 

In this scenario, Domain Isolation is applied using the principles described inSolution Accelerator"Server and Domain Isolation Using IPsec and Group Policy" (http://technet.microsoft.com/en-us/library/cc163159.aspx)

Server: Win Server 2012 R2, Clients Win7 or newer