diff --git a/content/active-directory-client.md b/content/active-directory-client.md
index 657e2a353d..444d197e64 100644
--- a/content/active-directory-client.md
+++ b/content/active-directory-client.md
@@ -106,6 +106,7 @@ Pop!\_OS and Ubuntu can be joined to an Active Directory domain, which allows us
     ldap_sasl_authid = POP-OS$
     krb5_keytab = /etc/sssd/my-keytab.keytab
     ldap_krb5_init_creds = true
+    ad_gpo_access_control = permissive
     ```
 
     After saving, set the appropriate permissions on that configuration file: