Bug 427294

Summary:	Supporting Group Policy restrictions
Product:	[I don't know] kde	Reporter:	The Feren OS Dev <ferenosdev>
Component:	general	Assignee:	Unassigned bugs mailing-list <unassigned-bugs>
Status:	RESOLVED NOT A BUG
Severity:	wishlist	CC:	nate
Priority:	NOR
Version:	unspecified
Target Milestone:	---
Platform:	Other
OS:	Linux
Latest Commit:		Version Fixed In:
Sentry Crash Report:

Description The Feren OS Dev 2020-10-03 13:41:59 UTC

SUMMARY
With Ubuntu recently adding the option to have Active Directory integration in Ubuntu 20.10's Ubiquity, it reminded me of the fact that basically no DEs, as far as I know, integrate with Group Policy to restrict their experiences accordingly.

If it's feasible to do, it would be cool if Group Policy support was implemented, via the already existing appropriate Kiosk restrictions being applied on each Active Directory user. This would be handy for businesses, and places of education, where they usually have different restrictions per user on Windows.

Comment 1 Nate Graham 2020-10-05 20:41:15 UTC

Isn't Group Policy a Windows Active Directory thing? What exactly do you mean by "support" or "integrate with"? Isn't that stuff mostly specific to the topology of a Windows network and Windows users? What does Ubiquity do now? How did Ubuntu do it?

Comment 2 The Feren OS Dev 2020-10-06 18:27:54 UTC

I think Group Policy is a Windows Active Directory thing, pretty sure it is... by supporting I mean, if it's even possible to do so, translate all the policies that can be translated into KDE Kiosk Mode's respective restrictions when logged in as appropriate Active Directory users.

Haven't really explored how it works in Ubuntu 20.10, to be honest - all I've seen is that they've uploaded documentation for enterprises about it, and a checkbox at the bottom of the User Information step of Ubiquity in Ubuntu 20.10.

Comment 3 Nate Graham 2020-10-06 18:50:34 UTC

> translate all the policies that can be translated into KDE Kiosk Mode's
> respective restrictions when logged in as appropriate Active Directory users.
Doesn't really seem possible TBH. These systems developed independently of one another; mapping them together would be a probably unsolvable nightmare.

Can you even log in as an AD user in the first place? An OD user through LDAP, sure, but AD? I don't think so.