up until now, my firm has been joining computers to the domain, which creates the computer object for you. we'd like to change this to pre-creating the computer object so the object can be moved into the correct security group before the computer joins the domain. i tried to create the computer object first and then join the domain as that computer name, but i got an error that said the computer name already exists and it was going to join the domain as the old name. is there a policy for doing this right? how does active directory know that the computer i'm joining with is the one i want coupled with the computer account i've already created?