https://help.ubuntu.com/lts/serverguide/sssd-ad.html
set default shell in [nss]
section of /etc/sssd/sssd.conf
[nss]
default_shell = /bin/bash
note that sudo systemctl start sssd.service
will fail until after kinit
and sudo net ads join -k
add windows "enterprise admins" group to sudoers in root visudo