added config to only allow server admins to login

domainjoin.sh

@@ -40,6 +40,8 @@ fi
 sed --in-place 's/^use_fully_qualified_names = True/use_fully_qualified_names = False/' /etc/sssd/sssd.conf
 # set home directory to /home/<username>
 sed --in-place 's/^fallback_homedir = \/home\/%u@%d/fallback_homedir = \/home\/%u/' /etc/sssd/sssd.conf
+# change the provider to simple and then only allow the server admins to login
+sed --in-place 's/^access_provider = ad/access_provider = simple\nsimple_allow_groups = Server Admins/' /etc/sssd/sssd.conf
 
 # reboot sssd
 systemctl restart sssd