Downstream ticket -
https://bugzilla.redhat.com/show_bug.cgi?id=1169459
Just a note ensuring that there is no confusion in which policy to edit. I did not think
that Remote Desktop translated to SSH =D
diff --git a/src/man/sssd-ad.5.xml b/src/man/sssd-ad.5.xml
index 4e29d4f..9542a21 100644
--- a/src/man/sssd-ad.5.xml
+++ b/src/man/sssd-ad.5.xml
@@ -340,6 +340,11 @@ FOREST:EXAMPLE.COM:(memberOf=cn=admins,ou=groups,dc=example,dc=com)
which GPO-based access control is evaluated based on
the InteractiveLogonRight and
DenyInteractiveLogonRight policy settings.
+
+ Note: Using the Group Policy Management Editor this
+ value InteractiveLogonRight is called "Allow log on
+ locally" and "Deny log on locally".
+
</para>
<para>
It is possible to add another PAM service name
@@ -405,6 +410,11 @@ FOREST:EXAMPLE.COM:(memberOf=cn=admins,ou=groups,dc=example,dc=com)
which GPO-based access control is evaluated based on
the RemoteInteractiveLogonRight and
DenyRemoteInteractiveLogonRight policy settings.
+
+ Note: Using the Group Policy Management Editor this
+ value is called "Allow log on through Remote Desktop
+ Services" and "Deny log on through Remote Desktop
+ Services".
</para>
<para>
It is possible to add another PAM service name