realm discover -v [realm-name] Discover available realm realm join -v [-U user] realm-name Enroll this machine in a realm realm leave -v [-U user] [realm-name] Unenroll this machine from a realm realm list List known realms realm permit [-ax] [-R realm] user ... Permit user logins realm deny --all [-R realm] Deny user logins