A few months ago I moved a clients office to an LDAP / samba domain. Previously we used a Windows program that would edit the registry for users that would restrict them from doing things, like group policies. We are now finding out that this program does not work with domain accounts. I have read the SAMBA3-HOW-TO Collection document. In it, it references using Microsoft AD to creage group policies. My issue is that I dont have a Microsft Server with AD on it, hence why everything is Linux. The clients range from Windows 2000 to XP.

Is there any simple / not-simple way to create and incorporate group policies with LDAP ?

I'm currently in this exact same position. We have a Linux server and many Windows clients - but no Windows server :P I'm wondering how other admins in similar positions manage such an environment. All I've come up with is to apply local group policy settings, but they're not as powerful (missing some features) and they're computer wide (meaning some more "priviledged" users are stuck with the same restrictions). Any tips would be appreciated.

Windows Active Directory Group Policies are not a part of LDAP.

There are no "free" directories that support centralized administration of Windows Group Policies.

Samba does not support Windows Group Policies.