AWS res documentation change
Summary
Added 'Automatically Join Active Directory' configuration options and expanded version applicability for email updates
Security assessment
Documents security feature for domain joining behavior control. The warning about required domain-join logic in custom scripts when disabled addresses security implications of misconfiguration, but does not fix a specific vulnerability.
Diff
diff --git a/res/latest/ug/active-directory-sync.md b/res/latest/ug/active-directory-sync.md index b32e18096..93d0f2b5b 100644 --- a//res/latest/ug/active-directory-sync.md +++ b//res/latest/ug/active-directory-sync.md @@ -5 +5 @@ -Runtime ConfigurationEmail Update after Initial AD Sync (release 2025.09)How to manually start or stop the sync (release 2025.03 and later)How to manually run the sync (release 2024.12 and 2024.12.01)SSO configuration +Runtime ConfigurationEmail Update after Initial AD Sync (release 2025.09 and later)How to manually start or stop the sync (release 2025.03 and later)How to manually run the sync (release 2024.12 and 2024.12.01)SSO configuration @@ -31,0 +32,17 @@ After the initial installation, administrators can view or edit the AD configura +### Automatically Join Active Directory + +Administrators can configure the **Automatically Join Active Directory** setting to control directory domain join behavior during VDI launch. + +**Configuration options:** + + * **Enabled** \- Automatically joins Windows and Linux VDIs to your directory domain during launch. + + * **Disabled** \- Turns off automatic domain joining. Linux instances can launch with or without domain joining. Windows instances require domain joining to launch successfully, so administrators must include domain-join logic in their custom launch scripts. + + + + +###### Important + +If you disable this setting, verify that your Windows instance custom launch scripts include the necessary domain-join logic. + @@ -71 +88 @@ The following example enables debug level for SSSD logs: -## Email Update after Initial AD Sync (release 2025.09) +## Email Update after Initial AD Sync (release 2025.09 and later)