On Tue, 2018-10-02 at 08:31 +0000, Walter Laub wrote: > I configured to authenticate (via winbindd) against AD. > > It works, but it is possible to authenticate as well on non-AD-member > devices with an AD user. Yes > Is it possible to authenticate only with the mandatory criteria "AD > membership"? No -- Matthew