1

I want to know if windows machines that exists in a domain can be replaced with linux machines and emulate the domain with its functionality, for example apply group policy or disable USB sticks on the linux machines

1 Answer 1

1

You could replace your windows server with a samba4 server like zentyal.

First introduce it as a BDC, after this you should move the FSMO roles from the windows server to the zentyal (or the samba4 server) (using dcpromo in the windows server to downgrade the server as server and convert it to a normal client).

In that point you'll have to configure your GPO's for your windows machines to not allow the use of USB sticks, it's very easy using RSAT from a windows client machine.

If you want to use GNU/linux machines you have some options depending of the distro that you want to use.

Using an ubuntu/debian system you have to configure the automount options to prevent the mounting of USB sticks.

If the number of GNU/linux machines are a lot to make changes one by one, you could replace GPO with software as Ansible or puppet.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .