Enforce GPO access control

2025-06-09 01:34:29 +02:00 · 2025-06-09 01:34:29 +02:00 · 48caacd9e5
commit 48caacd9e5
parent ce4401033a
1 changed files with 2 additions and 1 deletions
--- a/modules/nixos/domain.nix
+++ b/modules/nixos/domain.nix
@ -77,8 +77,9 @@ in
        access_provider = ad
        chpass_provider = ad
        use_fully_qualified_names = false
+        ldap_schema = ad
        ldap_id_mapping = true
-        ad_gpo_access_control = permissive
+        ad_gpo_access_control = enforcing
        dyndns_update = true
        dyndns_refresh_interval = 3600
        dyndns_update_ptr = true