[SOLVED] Linux Equivalent for Microsoft Group Policy Object Editor

Gad · 05-24-2013, 02:39 AM

Hi everyone,

I was wondering if there is a open source application that would be the equivalent of the Microsoft Group Policy Object Editor.
(AKA: gpedit.msc)

IE:
I am wanting to lock down the Linux desktops from the end user experience on 12.04 (precise) 32-bit. We are NOT running Samba 4 or a Microsoft Domain Controller.

You response would be highly appreciated.

Thanks

pan64 · 05-24-2013, 03:47 AM

You should not look for windows system apps on linux, they are totally different. probably you need selinux: https://en.wikipedia.org/wiki/Security-Enhanced_Linux

bloodstreetboy · 05-24-2013, 07:56 AM

Quote:

Originally Posted by mariose

I am wanting to lock down the Linux desktops from the end user experience on 12.04 (precise) 32-bit.

What do you mean by this?
Do you want that some users should not reach on their desktops.
You can lock them or you can disable them as a root using command line so when ever, you will not unlock them or enable them, they will not be able to log-in again.
If there are hundred of users, put all them in single group and Inactive the whole group so they will not be able to login until you make them active.

Gad · 05-24-2013, 10:08 AM

Hi Guys,

Apologies for not making myself clear earlier.

I will certainly look into SElinux. Thank you "pan64"

Basically i want to limited what the users are able to do on their desktops. I would like them to have even less rights than a standard "user" account.

IE: No Games,No Desktop Customization,No changes to folders. Almost like a mandatory desktop that is standardized throughout the organization.

Thank you for your valuable input.

pan64 · 05-24-2013, 01:39 PM

I'm really sorry, but I think you need to be familiar with selinux first and find your own way. The most important thing is you should not think of the windows way but learn the tool and use its features. Otherwise you will be confused and lost...

Gullible Jones · 05-24-2013, 02:01 PM

Don't take my word on it, but I'm not sure what you're looking for is actually possible right now.

There are bunch of solutions for e.g. centralized authentication, and for configuration management. But actually micromanaging what users can do with their desktops... Not so much AFAIK. This is an area where Windows has a huge lead.

That said, I for one would be very glad to hear about anything that could challenge Microsoft's advantage here.