diff --git a/CLIENT_DATA/README b/CLIENT_DATA/README
index 6d916c2..0a58d64 100644
--- a/CLIENT_DATA/README
+++ b/CLIENT_DATA/README
@@ -8,4 +8,7 @@
 		  - bei MS Gültigkeitsprüfung erforderlich
 		  - App in .exe und .cab verpackt
 
+- Soll der Computer in eine OU verschoben werden (property "MachineObjectOU"), dann
+  muss der User (Property "joinadmin") Mitglied der AD Gruppe "Domain-Admins" sein.
+
 #INFO0:i8708 Do 05.04.2012 13:30, FROM=dt  SUBJ=Netdom.exe
\ No newline at end of file
diff --git a/CLIENT_DATA/setup32.ins b/CLIENT_DATA/setup32.ins
index 9af9b8b..9aa01fa 100644
--- a/CLIENT_DATA/setup32.ins
+++ b/CLIENT_DATA/setup32.ins
@@ -29,7 +29,7 @@ Set $joinadmin$ = GetProductProperty ("joinadmin","values")
 Set $joinadminpw$ = GetProductProperty ("joinadminpw","values")
 Set $orgunit$ = GetProductProperty ("MachineObjectOU","values")
 if not ($orgunit$ = "") 
-   Set $joinstr$ = "JOIN %PCName% /Domain:" + $domainname$ + " /UserD:" + $joinadmin$ + " /PasswordD:" + $joinadminpw$ + " /OU:" + $orgunit$
+   Set $joinstr$ = "JOIN %PCName% /Domain:" + $domainname$ + " /UserD:" + $joinadmin$ + " /PasswordD:" + $joinadminpw$ + " /OU:" + '"' + $orgunit$ + '"'
 else
    Set $joinstr$ = "JOIN %PCName% /Domain:" + $domainname$ + " /UserD:" + $joinadmin$ + " /PasswordD:" + $joinadminpw$
 endif