diff --git a/changelog/19334.txt b/changelog/19334.txt
new file mode 100644
index 000000000000..7df68268aabe
--- /dev/null
+++ b/changelog/19334.txt
@@ -0,0 +1,3 @@
+```release-note:deprecation
+secrets/ad: Marks the Active Directory (AD) secrets engine as deprecated.
+```
\ No newline at end of file
diff --git a/helper/builtinplugins/registry.go b/helper/builtinplugins/registry.go
index 24539af5cfe7..8a24a58c34ad 100644
--- a/helper/builtinplugins/registry.go
+++ b/helper/builtinplugins/registry.go
@@ -146,7 +146,10 @@ func newRegistry() *registry {
 			"snowflake-database-plugin":         {Factory: dbSnowflake.New},
 		},
 		logicalBackends: map[string]logicalBackend{
-			"ad":       {Factory: logicalAd.Factory},
+			"ad": {
+				Factory:           logicalAd.Factory,
+				DeprecationStatus: consts.Deprecated,
+			},
 			"alicloud": {Factory: logicalAlicloud.Factory},
 			"aws":      {Factory: logicalAws.Factory},
 			"azure":    {Factory: logicalAzure.Factory},