diff --git a/ad-auth/templates/sssd.conf.j2 b/ad-auth/templates/sssd.conf.j2
index 3f72974f17785e9e24d8544d1a24df0e0da501a7..fd2dac80be456f4edd304fbc27ddb45fd1f5a740 100644
--- a/ad-auth/templates/sssd.conf.j2
+++ b/ad-auth/templates/sssd.conf.j2
@@ -25,4 +25,4 @@ ldap_user_fullname = displayName
 krb5_lifetime = 48h
 krb5_renewable_lifetime = 200h
 krb5_renew_interval = 30m
-ad_gpo_access_control = disabled # ignore group policies 
+ad_gpo_access_control = disabled