As you may have surmised by now, I am a big fan of SSSD. One recent addition to this utility was the ability to control SSH access via an active directory group policy. Yes, you read that right. You can control SSH access by the placement of the system's computer account within active directory which can then determine what group policies are applied. In the heterogeneous environments that most of us work in, this just might make your life a bit easier AND impress your Windows admin friends!