Set ad_gpo_implicit_deny to true

2025-06-09 02:57:06 +02:00 · 2025-06-09 02:57:06 +02:00 · 03e96662cc
commit 03e96662cc
parent d6d54e213e
1 changed files with 1 additions and 0 deletions
--- a/modules/nixos/domain.nix
+++ b/modules/nixos/domain.nix
@ -97,6 +97,7 @@ in
        ldap_schema = ad
        ldap_id_mapping = true
        ad_gpo_access_control = enforcing
+        ad_gpo_implicit_deny = true
        dyndns_update = true
        dyndns_refresh_interval = 3600
        dyndns_update_ptr = true