# Authpolicy

This directory contains the Authpolicy service which provides functionality to
join Active Directory (AD) domains, authenticate users against AD and to fetch
device and user policies from AD in its specific GPO format, convert them into
protobufs and make them available to Chrome OS by injecting them into session
manager.

The service is conceptually similar to the Kerberos service running on devices
that are not AD managed. See kerberos/README.md for more information.