this post was submitted on 03 Nov 2025
38 points (97.5% liked)

Linux

9995 readers
471 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 2 years ago
MODERATORS
 

I'm asking because they're might be a way for me to have a Linux laptop at work. But I'd like it to be connected to the Active Directory for login and other accesses. I'm specifically thinking of installing either Kubuntu or Zorin OS. (Zorin seems better)

Anyone got experience with this? How did it go? Was there any advantages or disadvantages in having you computer connected to AD for login?

top 8 comments
sorted by: hot top controversial new old
[–] frongt@lemmy.zip 15 points 1 day ago

Yes, joining AD is trivial. But you're going to have to configure PAM to use it for authentication yourself, which is non-trivial. Nor are you going to benefit from group policy, including automatic cert policy if your org uses it.

If you don't have a dedicated Linux team at work, I wouldn't bother. You can use it, but you'll be doing a whole bunch of integration work too. (Or, obviously, just use Linux, do the minimum to comply with policy, then provide creds as necessary to access network resources.)

[–] Aedis@lemmy.world 10 points 1 day ago (1 children)

I think this is something you have to ask your security team or your device management team. If your company isn't big enough to have either of those, then joining the AD isn't mandatory most likely.

[–] Creat@discuss.tchncs.de 4 points 1 day ago

We don't have either of those, joining ad is still mandatory.

[–] HubertManne@piefed.social 7 points 1 day ago

Should not be much of an issue. I added macs and linux machines to the AD I ran for a university lab way back in the early aughts and even after moving to the university system so that we would not need to run our own hardware it was not that hard. The big issue is if the guys running the AD are onboard.

[–] possiblylinux127@lemmy.zip 3 points 1 day ago* (last edited 1 day ago)

You can domain join it with SSSD

I wouldn't necessarily recommend it though since all of the AD tooling is build with Windows in mind. Chances are supporting a Linux machine is going to be hard.

[–] lurkingllama@discuss.tchncs.de 2 points 9 hours ago

Joining a Linux machine to an AD domain is quite easy using realmd. It can use sssd/ad-cli or samba winbind as a back-end and will do all the wiring up of NSS, PAM and the like for you. You can even let it install missing distro packages for the domain join for you - or you can have it tell you what packages you're missing and install them yourself.

You will need to talk to your IT department (or whoever is responsible for AD) though, not least because a domain admin will have to input their credentials so that the domain join (creation of the Computer object in LDAP and generation of the Kerberos keyfile) can happen.

[–] meldrik@lemmy.wtf 2 points 1 day ago

I know it’s possible to enroll Linux machines on Azure/Intune, but I don’t think every distribution supports it out-of-the box.