For a school assignment, I was asked to lock the following three settings on Windows and Linux workstations:
- Network configuration (eg unable to change IPs, DNS servers)
- Trusted sites (not relevant to this question because trusted sites are an Internet Explorer-specific feature)
I know that I can do this with GPOs over Windows, but I'm not sure how to do that with Ubuntu Server 19.04. There are programs like Chef and Ansible, but both seem to be very large packages for these two specific settings.
The Ubuntu workstation connects to a Windows Server AD and requires access to network shares. I believe that the AD integration and Samba will fulfill this need, but I'm leaning my head over the GPO part.
I've looked at SSSD, but I can not tell if these two specific GPO settings are supported on Linux.
Ideally, all newly deployed workstations would automatically apply these settings, but I'm not sure that's realistic. Should I watch a bash script that runs automatically when logging in to set these settings statically?
Any advice is very grateful, thanks in advance!