AWS res documentation change
Summary
Added 'Automatically Join Active Directory' configuration section and updated release version references
Security assessment
This adds documentation about domain join behavior configuration which has security implications for access control, but does not indicate a specific security vulnerability being fixed.
Diff
diff --git a/res/archive/release-minus-1/ug/active-directory-sync.md b/res/archive/release-minus-1/ug/active-directory-sync.md index 290157683..57a6c32b9 100644 --- a//res/archive/release-minus-1/ug/active-directory-sync.md +++ b//res/archive/release-minus-1/ug/active-directory-sync.md @@ -5 +5 @@ -Runtime ConfigurationEmail Update after Initial AD Sync (release 2025.09)How to manually start or stop the sync (release 2025.03 and later)How to manually run the sync (release 2024.12 and 2024.12.01)SSO configuration +Runtime ConfigurationEmail Update after Initial AD Sync (release 2025.09 and later)How to manually start or stop the sync (release 2025.03 and later)How to manually run the sync (release 2024.12 and 2024.12.01)SSO configuration @@ -31,0 +32,17 @@ After the initial installation, administrators can view or edit the AD configura +### Automatically Join Active Directory + +Administrators can configure the **Automatically Join Active Directory** setting to control directory domain join behavior during VDI launch. + +**Configuration options:** + + * **Enabled** \- Automatically joins Windows and Linux VDIs to your directory domain during launch. + + * **Disabled** \- Turns off automatic domain joining. Linux instances can launch with or without domain joining. Windows instances require domain joining to launch successfully, so administrators must include domain-join logic in their custom launch scripts. + + + + +###### Important + +If you disable this setting, verify that your Windows instance custom launch scripts include the necessary domain-join logic. + @@ -71 +88 @@ The following example enables debug level for SSSD logs: -## Email Update after Initial AD Sync (release 2025.09) +## Email Update after Initial AD Sync (release 2025.09 and later)