---
title: "Joining Linux (RHEL) to Active Directory"
canonical: "https://kb.uconn.edu/space/IKB/10862953219/Joining%20Linux%20(RHEL)%20to%20Active%20Directory"
format: markdown
---
All new RHEL machines should use Active Directory for authentication and, potentially, authorization. This document outlines the process by which an RHEL 7 or 8 machine can be added to UConn's Active Directory if the user has the necessary permissions.

1. Install packages.
2. Set hostname to end with “[grove.ad.uconn.edu](http://grove.ad.uconn.edu).”  
`hostnamectl set-hostname somethingunique.grove.ad.uconn.edu`
3. If on RHEL 8, re-enable some deprecated crypto versions AD still uses.  
`update-crypto-policies --set LEGACY`
4. Join realm.
  1. You can find the distinguished name of the OU by going into **Active Directory Users and Computers**, finding the destination OU, and viewing its attributes under **Properties**.
5. Modify the domain section of */etc/sssd/sssd.conf*.
6. Add to the domain section of */etc/sssd/sssd.conf*.
7. Deny login for all.
8. Give login access to groups or users.
9. Give Sudo access to groups by adding to the sudoers file.

## Related Articles

> Macro (contentbylabel)