diff --git a/roles/ipaclient/tasks/install.yml b/roles/ipaclient/tasks/install.yml
index 662692254d574c0ac238fc3b62ba9341ca281c6a..918647f877d008067865dbed88d0eaa84451c058 100644
--- a/roles/ipaclient/tasks/install.yml
+++ b/roles/ipaclient/tasks/install.yml
@@ -295,6 +295,8 @@
       nisdomain: "{{ ipaclient_nisdomain | default(omit)}}"
     when: not ipaclient_no_nisdomain | bool
 
+  when: not ansible_check_mode
+
   always:
   - name: Cleanup leftover ccache
     file:
diff --git a/roles/ipareplica/tasks/install.yml b/roles/ipareplica/tasks/install.yml
index a6309561e88b71ee420221202be0d618c85bf534..4c5b86b0f13eb4144d4cdfee2d9e13bbe8ecbc1a 100644
--- a/roles/ipareplica/tasks/install.yml
+++ b/roles/ipareplica/tasks/install.yml
@@ -622,3 +622,5 @@
       path: "/root/.ipa_cache"
       state: absent
     when: result_ipareplica_enable_ipa.changed
+
+  when: not ansible_check_mode
diff --git a/roles/ipaserver/tasks/install.yml b/roles/ipaserver/tasks/install.yml
index 7808dd46f7042dd2ecac5bc5a3381dfe54c25017..f2b3d16774f4c673faaffc703f3e08bd4a199c8a 100644
--- a/roles/ipaserver/tasks/install.yml
+++ b/roles/ipaserver/tasks/install.yml
@@ -388,3 +388,5 @@
       {{ "--add-service=dns" if ipaserver_setup_dns | bool else "" }}
       {{ "--add-service=ntp" if not ipaclient_no_ntp | bool else "" }}
     when: ipaserver_setup_firewalld | bool
+
+  when: not ansible_check_mode