MicrosoftMicrosoftLouisPTC Thank you for the reply, it is very helpful!
As you probably know, adcli does allow setting up SPN with --service-name and generates a keytab, for example:
$sudo adcli join --domain CONTOSO.COM --service-name=cifs --computer-name smbserver --host-fqdn smbserver.CONTOSO.COM --host-keytab /etc/smbserver.keytab -v
This still doesn't configure krb.conf or sssd but that can be done automagically with realm (which is still recommended with the instructions provided for adutil) 
So if I understand you correctly, the primary concern is that adcli is using RC4 encryption which isn't secure? What encryption is adutil utilizing?
Just want to be sure I'm not missing some additional functionality provided by adutil that isn't available with adcli - not that better encryption isn't a huge improvement!
Thanks!
