diff --git a/modules/nixos/domain.nix b/modules/nixos/domain.nix
index 43afd9f..a99d744 100644
--- a/modules/nixos/domain.nix
+++ b/modules/nixos/domain.nix
@@ -110,6 +110,7 @@ in
       after = [ "adcli-join.service" ];
       requires = [ "adcli-join.service" ];
     };
+    security.pam.services.login.sssdStrictAccess = true;
 
     # Set up Sudo
     security.sudo =