AWS res documentation change
Summary
Added 'Automatically Join Active Directory' configuration with domain-join requirements
Security assessment
Documents security-critical domain-join behavior for Windows/Linux VDIs and warns about custom script requirements. While not fixing a vulnerability, it explicitly documents security controls for directory integration.
Diff
diff --git a/res/archive/release-minus-2/ug/active-directory-sync.md b/res/archive/release-minus-2/ug/active-directory-sync.md index d884ef8ff..5da41f842 100644 --- a//res/archive/release-minus-2/ug/active-directory-sync.md +++ b//res/archive/release-minus-2/ug/active-directory-sync.md @@ -7 +7 @@ -Runtime ConfigurationEmail Update after Initial AD Sync (release 2025.09)How to manually start or stop the sync (release 2025.03 and later)How to manually run the sync (release 2024.12 and 2024.12.01)SSO configuration +Runtime ConfigurationEmail Update after Initial AD Sync (release 2025.09 and later)How to manually start or stop the sync (release 2025.03 and later)How to manually run the sync (release 2024.12 and 2024.12.01)SSO configuration @@ -33,0 +34,17 @@ After the initial installation, administrators can view or edit the AD configura +### Automatically Join Active Directory + +Administrators can configure the **Automatically Join Active Directory** setting to control directory domain join behavior during VDI launch. + +**Configuration options:** + + * **Enabled** \- Automatically joins Windows and Linux VDIs to your directory domain during launch. + + * **Disabled** \- Turns off automatic domain joining. Linux instances can launch with or without domain joining. Windows instances require domain joining to launch successfully, so administrators must include domain-join logic in their custom launch scripts. + + + + +###### Important + +If you disable this setting, verify that your Windows instance custom launch scripts include the necessary domain-join logic. + @@ -73 +90 @@ The following example enables debug level for SSSD logs: -## Email Update after Initial AD Sync (release 2025.09) +## Email Update after Initial AD Sync (release 2025.09 and later)