<html><head></head><body><div>.. if possible, would you know?</div><div>hi everybody,</div><div>I'm trying, and hoping it is possible to realm join an AD but is such a way so I tap my IPA into specific OU within that AD.</div><div>The thing is - I'm thinking it would make user access control ideal from the start as I need only users from that OU, but also because I'm only granted access to the user/group who has control over that OU.</div><div><a href="file://I'm">I'm</a> trying that but I see:</div><div><br></div><div>! The computer account RIDER already exists, but is not in the desired organizational unit.</div><div>adcli: joining domain ccc.bb.aa failed: The computer account RIDER already exists,</div><div> ! Failed to join the domain</div><div><br></div><div>I'm doing this:</div><div>$ realm join ccc.bb.aa --user=private-user --computer-ou=private</div><div><br></div><div>and computer is in OU=private of ccc.bb.aa</div><div>so is the user private-user</div><div><br></div><div>many thanks.</div><div>L</div></body></html>