Hello guys, i found lots of tutorials helping on how to map AD (Active Directory) users over Freeipa as seen here: https://jamalshahverdiev.wordpress.com/2017/09/09/integration-freeipa-in-centos7-to-microsoft-active-directory/ and http://prolinuxhub.com/integrate-freeipa-with-windows-2016-active-directory/

My question is, can i make the other way around? I wan't to map the Freeipa Group (Admin) as admin over the Active Directory. Can i?

I've already setup an transient two-way trust between both, authentication works nice for freeipa users over AD. I just want to setup admin users for the windows workstations.

Thanks.