Note to self when merging: s/on a domain controller/in a managed domain/g