diff --git a/tmpl/oned.conf b/tmpl/oned.conf
index 3af1eac..bc78144 100644
--- a/tmpl/oned.conf
+++ b/tmpl/oned.conf
@@ -875,7 +875,7 @@ DEFAULT_AUTH = "ldap"
 AUTH_MAD_CONF = [
     NAME = "ldap",
     PASSWORD_CHANGE = "YES",
-    DRIVER_MANAGED_GROUPS = "YES",
+    DRIVER_MANAGED_GROUPS = "NO",
     MAX_TOKEN_TIME = "86400"
 ]
    %end if